So: The updates have been made available by Citrix on last wednesday We've published update candidates for testers on thursday Updates for XCP-ng 7.6 have been made available to everyone yesterday Updates for XCP-ng 7.5 have been made available to everyone this morning Blog post published: https://xcp-ng.org/blog/2019/03/12/xcp-ng-security-bulletin-vulnerabilities-pv-guests/

Luckily (or not) XenServer is a tiny part of Citrix strategy/revenue/business. So I'm not concerned by this hack.

Wow... it was like 10years that I was viewing the kung fu panda instead