diff --git a/Config.mk b/Config.mk
index 10bd71ce51..9f0acf0715 100644
--- a/Config.mk
+++ b/Config.mk
@@ -224,9 +224,9 @@ ETHERBOOT_NICS ?= rtl8139 8086100e
 # CONFIG_QEMU ?= `pwd`/$(XEN_ROOT)/../qemu-xen.git
 CONFIG_QEMU ?= $(QEMU_REMOTE)
 
-QEMU_TAG ?= 1e5099d596b6f7a977d4bc040a54edc2a6a3c6a4
-# Mon Jun 30 10:07:54 2014 +0200
-# vnc: limit client_cut_text msg payload size
+QEMU_TAG ?= d886904dd6875648b33d58bb7d2fe75b45e4ea12
+# Wed Dec 9 11:47:35 2015 +0000
+# net: pcnet: add check to validate receive data size(CVE-2015-7504)
 
 # Short answer -- do not enable this unless you know what you are
 # doing and are prepared for some pain.