Hi Frank, are you sure the bug is really fixed? the qemu patch seems to be different from the virtualbox one, and seems that the affected code is not fixed http://git.qemu.org/?p=qemu.git;a=blobdiff;f=hw/block/fdc.c;h=d8a8edd936f42d4b1d801c996932668e456b5896;hp=f72a39216347e722496797555db9f208b0c5b4b2;hb=e907746266721f305d67bc0718795fedee2e824c;hpb=968bb75c348a401b85e08d5eb1887a3e6c3185f5
e.g. https://security-tracker.debian.org/tracker/CVE-2015-3456 http://xenbits.xen.org/xsa/advisory-133.html _______________________________________________ vbox-dev mailing list vbox-dev@virtualbox.org https://www.virtualbox.org/mailman/listinfo/vbox-dev