CVE-2017-3737 and CVE-2017-9798 are not part of VirtualBox. For the rest, Version 5.1.36 is currently building in the Leap 42.3 updates, and 5.2.10 will be submitted to Factory as soon as it completes a local build with Kernel_HEAD_standard.