Updated xen packages has been released for Debian GNU/Linux 9 to provide mitigations for the lazy FPU vulnerability affecting a range of Intel CPUs  Xen Security Update for Debian 9