The seventh corrective update of the Debian 12 distribution has been released, featuring accumulated packet updates and added corrections to the installer. This update includes 51 updates to eliminate stability problems and 55 updates to eliminate vulnerabilities (source).
One notable change in Debian 12.7 is the removal of the bcachefs-tools package, which provides utilities for managing the bcachefs file system. The removal was due to the inability to maintain the package in the Debian Stable branch, as it did not comply with dependencies required for the build. The package was recently rewritten in RUST and requires specific RUST components that are not available in Debian (source).
Another significant change in this update is the update to version 15.8.1 of the SHIM loading layer, which removes digital signatures from older versions of SHIM. This change will prevent other operating systems from booting via UEFI Secure Boot using older SHIM versions (up to 15.8). Several packages, including AMD64-Microcode, Ansible, Apache2, Intel-Microcode, Openssl, Qemu, Rustc-Web, and Systemd, have been updated to newer stable versions.
For fresh installations, downloadable images of Debian 12.7 are available. Existing systems supported in their current state will receive updates present in Debian 12.7 through the standard update installation system. Users can access security problem corrections included in the new Debian issues as updates are released on security.debian.org.
Simultaneously, the new release of the previous stable branch, DEBIAN 11.11, has been released. This release includes 50 updates to address stability issues and 27 updates to eliminate vulnerabilities. Like Debian 12.7, several packages, including AMD64-Microcode, Ansible, Apache2, Intel-Microcode, Nvidia-Graphics-Drivers-Tesla, Rustc-Web, and SHIM have been updated to new stable versions. Furthermore, packages like Bcachefs-Tools, Dnprogs, Iotjs, and OBFS4Proxy have been removed (source: