The seventh maintenance update of the Debian 12 distribution has been released, which includes accumulated package updates and fixes to the installer. The release features 51 updates addressing stability issues and 55 updates correcting vulnerabilities.
Among the changes in Debian 12.7, the removal of the bcachefs-tools package with utilities for managing the Bcachefs file system stands out. The reason for its removal is the inability to continue supporting the package in the Debian Stable branch due to dependency conflicts with the build requirements for Debian Stable. Bcachefs-tools was recently rewritten in Rust and requires specific versions of Rust components that are not compatible with the versions provided in Debian, and relaxing the dependencies does not guarantee the proper functioning of bcachefs-tools.
Another notable change is the update to version 15.8.1 of the shim boot layer. The update revokes the digital signatures of older versions of shim, which will prevent the booting of other operating systems that use older versions of shim (prior to 15.8) in UEFI Secure Boot mode. Additionally, packages such as amd64-microcode, ansible, apache2, intel-microcode, openssl, qemu, rustc-web, and systemd have been updated to fresh stable versions.
Installable builds with Debian 12.7 have been prepared for fresh installations. Systems previously installed and kept up to date receive the updates present in Debian 12.7 through the standard update installation system. Security issue fixes included in new Debian releases are available to users as updates are released through the security.debian.org service.
At the same time, a new release of the previous stable branch Debian 11.11 is available, which includes 50 updates addressing stability issues and 27 updates correcting vulnerabilities. Packages such as amd64-microcode, ansible, apache2, intel-microcode, nvidia-graphics-drivers-tesla, rustc-web, and shim have been updated to fresh stable versions (similar to Debian 12.7, the signatures for older versions of shim have been revoked). The packages bcachefs-tools, dnprogs, iotjs, and obfs4proxy have been removed.
Source: opennet.ru
