Hi Frank and Release Team,
>Oracle at this moment maintains a 4.0.x 4.1.x 4.2.x 4.3.x 5.0.x >branches where security fixes seems to be addressed all. > >(virtualbox-ose from o-o-s still needs some pinpoint fixes) virtualbox-ose is at version 3.2.10, and the last release from [1] is 3.2.28, and released two months ago. Does this mean that CVE gets fixed on 3.2.x too? [1] https://www.virtualbox.org/wiki/Changelog-3.2 thanks, Gianfranco -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org