Updated Xen packages has been released for Debian GNU/Linux 7 LTS
Package : xenXen Security Update for Debian 7 LTS
Version : 4.1.6.lts1-12
CVE ID : CVE-2016-9603 CVE-2016-9637 CVE-2017-2620
Multiple vulnerabilities have been discovered in the Xen hypervisor, which
could result in privilege escalation.
For Debian 7 "Wheezy", these problems have been fixed in version
4.1.6.lts1-12.
We recommend that you upgrade your xen packages.
Please note that CVE-2017-15590 (XSA-237) will *not* be fixed in wheezy as
the patches are too intrusive to backport.
The vulnerability can be mitigated by not passing through physical devices
to untrusted guests.
More information can be found on https://xenbits.xen.org/xsa/advisory-237.html
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS