Advisory DSA-6528-1, published September 29, 2026, fixes 1,313 CVE identifiers in Linux 6.12.111-1 for Debian 13 Trixie, a volume directly tied to AI-assisted vulnerability discovery in the kernel. A CVE identifier says nothing about severity or exploitability: the job is to update cleanly, not to panic at the number.

On September 12, 2026, Debian shipped 13.7, the seventh trixie point release, bundling 107 security updates and fixes across 106 packages. If you follow security.debian.org you already have most of it — the real value sits in the fresh install images and QEMU’s Secure Boot bypass fix.

Debian’s 13th stable release landed on August 9, 2025, with 69,830 packages, kernel 6.12 LTS, and official RISC‑V support. It doesn’t make headlines — it runs your servers, clouds, and routers, and that’s exactly why you pick it.