This release fixes VSA-2026-012 (DLL sideloading vulnerability in XenClean and XenBootFix).
If your VM is running 9.1.146, you don't need to update. You just need to replace any XenClean and XenBootFix files you downloaded.
The package\XenClean and package\XenBootFix directories contain fixed versions of the aforementioned tools.
package\XenTools-x64.msi has not changed from version 9.1.146, and is only provided as a convenience. The installation MSI does not include the fixed XenBootFix.
You must use the one from package\XenBootFix or download the tool directly from GitHub!
The next release of the XCP-ng Windows Guest Tools will contain a fixed version of XenBootFix.