Sooo are we just going to ignore the vulnerability qsb-091-2023 "Xen Security Notice 1: winpvdrvbuild.xenproject.org potentially compromised"?

I do not see any more recent build of the XEN Windows PV Drivers.

Even the ones linked on the website https://xenproject.org/resources/downloads/ right now are only from 2023-07-13. Which is 11 days before that vulnerability was published.

Also the part that they replaced the executables with a warning text doesn't seem to apply to that website either...

#infosec #Xen