Debian 13.6 (Trixie) and 12.15 (Bookworm) include security updates. The 2013 Secure Boot CA has expired, and fwupd helps users transition to the new certificates.