Whonix-Xfce-17.0.3.0.ova can be found in distrowatch(dot)com/?newsid=11890 but has no information in other websites. Is this version a malware?
sha512sum Whonix-Xfce-17.0.3.0.ova
851fcd0fdd861646c74a62fb2dcc82f47af4ee2ef8c8646eb6592d121ad7f11e3c6c794e2442c960f40fa9e435d07f47e68267cf9f0f10d5847c089fa8c86b91
We don’t do malware audits since this is a highly time consuming and difficult process. This is elaborated in wiki chapter Malware Audits.
We also don’t archive old releases due to size.
I think I know and have been reading distrowatch.com every now and then as long as I know about Linux. As far as I know it is a reputable website and not spreading malware.
Nevertheless, it’s best to download Whonix from the Whonix homepage.
Related:
No offense, I just want to make sure if my download has been altered or not. Sha512sum of this file has been unavailable in this site. Is there no other way to verify this old version?
I had checked the sha512sum after download this, but now I want to do it again.
Better to download the images/software in general from their original sources. and in all cases always perform verifying the downloaded images.
(Backward compatibility not assured, as keys might get upgraded/changed by time)
Unless you dig deep and maybe find it one some mirror that does not purge releases, torrent, web archive, etc. no. There isn’t. Unsupported.