seL4 17++ release

_config.yml

@@ -37,10 +37,10 @@ collections:
   status:
     output: true
 
-sel4: "16.0.0"
-camkes: "camkes-3.13.0"
-capdl: "0.6.0"
-microkit: "2.3.1"
+sel4: "17.0.0"
+camkes: "camkes-3.13.1"
+capdl: "0.6.1"
+microkit: "2.4.0"
 
 # Front matter defaults:
 defaults:

_data/projects/microkit.yml

@@ -12,6 +12,24 @@ repositories:
     repo: microkit_tutorial
 
 sdk_downloads:
+  - version: 2.4.0
+    sdks:
+    - label: "microkit-sdk-2.4.0-linux-x86-64.tar.gz"
+      url: "https://github.com/seL4/microkit/releases/download/2.4.0/microkit-sdk-2.4.0-linux-x86-64.tar.gz"
+      os: Linux
+      arch: x86-64
+    - label: "microkit-sdk-2.4.0-linux-aarch64.tar.gz"
+      url: "https://github.com/seL4/microkit/releases/download/2.4.0/microkit-sdk-2.4.0-linux-aarch64.tar.gz"
+      os: Linux
+      arch: AArch64
+    - label: "microkit-sdk-2.4.0-macos-x86-64.tar.gz"
+      url: "https://github.com/seL4/microkit/releases/download/2.4.0/microkit-sdk-2.4.0-macos-x86-64.tar.gz"
+      os: macOS
+      arch: x86-64
+    - label: "microkit-sdk-2.4.0-macos-aarch64.tar.gz"
+      url: "https://github.com/seL4/microkit/releases/download/2.4.0/microkit-sdk-2.4.0-macos-aarch64.tar.gz"
+      os: macOS
+      arch: AArch64
   - version: 2.3.1
     sdks:
     - label: "microkit-sdk-2.3.1-linux-x86-64.tar.gz"

_data/projects/rust.yml

@@ -33,3 +33,7 @@ releases:
     url: "https://github.com/seL4/rust-sel4/releases/tag/v5.0.0"
     kernel_version: 16.0.0
     microkit_version: 2.3.0
+  - version: 6.0.0
+    url: "https://github.com/seL4/rust-sel4/releases/tag/v6.0.0"
+    kernel_version: 17.0.0
+    microkit_version: 2.4.0

content_collections/_releases/camkes/camkes-3.13.1.md

@@ -0,0 +1,45 @@
+---
+version: camkes-3.13.1
+version_digits: 2
+project: camkes
+SPDX-License-Identifier: CC-BY-SA-4.0
+SPDX-FileCopyrightText: 2026 seL4 International
+---
+
+# CAmkES Version camkes-3.13.1 Release
+
+Announcing the release of `camkes-3.13.1` with the following changes:
+
+## camkes-3.13.1 2026-10-30
+
+Using seL4 version 17.0.0
+
+### Changes
+
+#### CAmkES Tool
+
+* No changes in the CAmkES tool itself
+
+#### CAmkES VMM
+
+* Fix a potential stack overflow in `virtio_block_emul`
+* Add BCM2711 platform support
+* Update for the additional register access traps in the new seL4 version:
+  ignore reads and writes to co-processor registers from Linux.
+* Remove platform support for Arndale `exynos5250` (see RFC-19)
+* Remove platform support for Odroid-X `exynos4` (see RFC-19)
+
+### Upgrade Notes
+
+* No special upgrade requirements.
+
+## Full changelog
+
+Use `git log camkes-3.13.0..camkes-3.13.1` in
+<https://github.com/seL4/camkes-tool>
+
+## More details
+
+See the
+[documentation](https://github.com/seL4/camkes-tool/blob/camkes-3.13.1/docs/index.md)
+or ask on the mailing list!

content_collections/_releases/capdl/0.6.1.md

@@ -0,0 +1,32 @@
+---
+version: 0.6.1
+project: capdl
+SPDX-License-Identifier: CC-BY-SA-4.0
+SPDX-FileCopyrightText: 2026 seL4 International
+---
+
+# capDL Version 0.6.1 Release
+
+Announcing the release of `0.6.1` with the following changes:
+
+## 0.6.1 2026-10-30
+
+Using seL4 version 17.0.0
+
+### Changes
+
+* Reduced Python dependencies
+
+### Upgrade Notes
+
+This is a binary compatible version on the capDL side, existing capDL specs
+should continue to work without change.
+
+## Full changelog
+
+Use `git log 0.6.0..0.6.1` in <https://github.com/seL4/capdl>
+
+## More details
+
+See the [documentation](https://github.com/seL4/capdl/tree/master/capDL-tool/doc)
+or ask on the mailing list!

content_collections/_releases/microkit/2.4.0.md

@@ -0,0 +1,44 @@
+---
+version: 2.4.0
+project: microkit
+parent: /releases/microkit.html
+SPDX-License-Identifier: CC-BY-SA-4.0
+SPDX-FileCopyrightText: 2026 seL4 International
+---
+
+# Microkit Release 2.4.0
+
+This release contains security and bug fixes.
+This release is breaking.
+
+## Breaking changes
+
+* seL4 has been updated from 16.0.0 to 17.0.0, which includes breaking
+  changes for virtual machines. Please see the
+  [kernel's changelog](https://github.com/seL4/seL4/releases/tag/17.0.0)
+  for upgrade notes.
+
+## Security
+
+* Reply capabilities no longer have grant reply permission. Previously a
+  server could send capabilities over a reply.
+* PDs no longer get their parent's fault endpoint capability. Previously,
+  in 2.3.1, a PD could send its parent fake faults with arbitrary messages.
+  In 2.3.0 and earlier, a PD could receive, and so consume, fault IPCs
+  meant for the parent.
+
+## Bug fixes
+
+* VMs on x86-64 now work with more than 1 VM per system and in the SMP
+  configuration of `x86_64_generic_vtx`. This was a known issue in 2.3.1
+  and earlier, caused by a bug in seL4 that was fixed in
+  [PR 1732](https://github.com/seL4/seL4/pull/1732).
+
+## Full changelog
+
+Use `git log 2.3.1..2.4.0` in <https://github.com/seL4/microkit/>
+
+## More details
+
+See the [documentation](/projects/microkit/manual/2.4.0/)
+or ask on the mailing list!