Please add bug 486352 to GLSA 201408-17 / qemu since that vulnerability is covered in 2.0.0-r1
Thanks for noticing the missing bug, this has been fixed.