Security updates across Debian and Fedora

Tier B · Patch this week – Put it in the sprint

Tier B because: Full takeover OR secrets exposed OR supply chain

Reach

Attack

Damage

Fix

Full takeover

What to do

Update the affected packages with your distribution's package manager (apt for Debian, dnf for Fedora).

The Brief

Debian issued security updates for aodh, apache2, dnspython, firefox-esr, mutt, octavia, spip, thunderbird and watcher.
Fedora issued security updates for epiphany, firefox, freerdp, java-25-openjdk, java-latest-openjdk, libsoup3, perl-HTTP-Parser-XS, perl-libnet, php-getid3 and pipx.
The source list is truncated, and the sources give no severity, CVE or exploitation details for these updates.

If you run Debian or Fedora, these packages, including browsers, mail clients, Java runtimes and web servers, may be exposed until updated.

Checklist · 2 of 10 yes · estimated from older data, not yet checked against the sources

Yes	Hits tech teams	Does it affect software, devices or services that developers, ops or IT teams build with, run or are responsible for?
No	Core infrastructure	Is the flaw in, or the compromise of, software that nearly every team runs?
No	Popular tool	Is the flaw in, or the compromise of, a widely used framework, tool, platform, OS or package?
No	Exploited in the wild	Do sources report real attacks using it?
No	Public exploit	Is a working exploit or detailed proof-of-concept public?
No	Remote, no login	Can an attacker use it over the network without credentials or user interaction?
Yes	Full takeover	Does it lead to code execution, root/admin rights or full account takeover?
No	Secrets exposed	Were credentials, tokens, keys, configs, source code or customer data stolen or exposed?
No	Supply chain	Was malicious code shipped through a channel developers trust?
No	No fix yet	Is there no patched version yet?

Nov 12
Debian and Fedora issued security updates for the listed packages (reported by LWN.net)
Nov 12 · 2:13 PM
LWN.net
Security updates for Thursday

First seen 6h ago · 1 source · Full story page · How tiers are decided