remove no-dsa for a number of qemu CVEs which were initially scheduled for

  the last point release, but then didn't make it in time and which are
  now again piggybacked on the forthcoming update