According to Oracle policy, they release fixed versions *before* publishing a CVE on it. It means that v4.1.8 has all the fixes of all CVEs.
-- -Alexey Eromenko "Technologov" _______________________________________________ vbox-dev mailing list [email protected] https://www.virtualbox.org/mailman/listinfo/vbox-dev
