diff --git a/Dockerfile b/Dockerfile
index dd31b90..fb5ff5c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-ARG DEBIAN_VERSION=11.9
+ARG DEBIAN_VERSION=12.7
 
 FROM ghcr.io/cnpem/lnls-debian-11-epics-7:v0.12.0-dev AS build-image
 
diff --git a/README.md b/README.md
index 9ee8fb5..7bda5f4 100644
--- a/README.md
+++ b/README.md
@@ -88,7 +88,7 @@ image should be tagged as `latest`, `:${TAG}` can simply be omitted.
 ### areaDetector IOCs
 
 `areaDetector` IOCs must be built with target `dynamic-link`. In addition, they
-must include `libxml2` and `libtiff5` in the `RUNTIME_PACKAGES`, as they are
+must include `libxml2` and `libtiff6` in the `RUNTIME_PACKAGES`, as they are
 not built in `ADSupport`.
 
 ### Pmac IOCs
diff --git a/base/.env b/base/.env
index f145fdd..cb36984 100644
--- a/base/.env
+++ b/base/.env
@@ -1,4 +1,4 @@
-DEBIAN_VERSION=11.9
+DEBIAN_VERSION=12.7
 ALPINE_VERSION=3.20.3
 
 EPICS7_BASE_VERSION=7.0.8.1
diff --git a/images/docker-compose-opcua.yml b/images/docker-compose-opcua.yml
index b7322c9..eac29fe 100644
--- a/images/docker-compose-opcua.yml
+++ b/images/docker-compose-opcua.yml
@@ -10,4 +10,4 @@ services:
       args:
         REPONAME: opcua
         RUNDIR: /opt/epics/modules/opcua/iocBoot/iocUaDemoServer
-        RUNTIME_PACKAGES: libxml2 libssl1.1
+        RUNTIME_PACKAGES: libxml2 libssl3