The third patch update for the Debian 11 distribution has been released, which includes accumulated package updates and fixes in the installer. This release features 92 updates addressing stability issues and 83 updates fixing vulnerabilities. Notable changes in Debian 11.3 include updates to the latest stable versions of packages such as apache2, clamav, dpdk, galera, openssl, and rust-cbindgen, as well as the removal of outdated packages angular-maven-plugin and minify-maven-plugin.
Installation images, as well as a live iso-hybrid of Debian 11.3, will soon be prepared for download and fresh installation. Previously installed systems that are kept up-to-date will receive the updates present in Debian 11.3 through the regular update installation system. Security fixes included in new Debian releases are made available to users as updates are released via the service security.debian.org.
A new release of the previous stable branch, Debian 10.12, is also available, which includes 78 updates addressing stability issues and 50 updates fixing vulnerabilities. The packages angular-maven-plugin and minify-maven-plugin have been excluded from the repository. OpenSSL now includes a check for the requested digital signature algorithm against the chosen security level. For example, if an attempt is made to use RSA+SHA1 with security level 2 set, an error will be returned since this algorithm is not supported at level 2. If necessary, the level can be overridden by specifying the parameter '-cipher "ALL:@SECLEVEL=1"' in the command line or changing settings in the file /etc/ssl/openssl.cnf.
Source: opennet.ru
