-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 29 Jul 2025 22:18:46 +0200 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: amd64 Version: 2.4.65-1~deb12u1 Distribution: bookworm Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Bastien Roucariès Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Changes: apache2 (2.4.65-1~deb12u1) bookworm; urgency=medium . * Team upload . [ Yadd ] * Drop patches included in upstream * New upstream version 2.4.64 (Closes: CVE-2025-23048, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020) * New upstream version 2.4.65 (Closes: CVE-2025-54090) * Unfuzz patches . [ Bastien Roucariès ] * Add a NEWS entry following CVE-2025-23048 Checksums-Sha1: 899437e60b2827d89de0a7ec3669bfe50f3554d5 3761564 apache2-bin-dbgsym_2.4.65-1~deb12u1_amd64.deb 42865e976dfc957f70ed6edb2e5c8556d6e0ca24 1396452 apache2-bin_2.4.65-1~deb12u1_amd64.deb 900cb1e7c384e67d710124dc6d55131bd0d47cda 320800 apache2-dev_2.4.65-1~deb12u1_amd64.deb 122b8ef87d03bd2c6cb0f100263db780bd4fbece 3140 apache2-ssl-dev_2.4.65-1~deb12u1_amd64.deb 00d93813bb7b213f1a2ff55e7c2ee97a2d67658d 12384 apache2-suexec-custom-dbgsym_2.4.65-1~deb12u1_amd64.deb e5ca38854cbcd22cb4805ae51b52688e4c551149 147976 apache2-suexec-custom_2.4.65-1~deb12u1_amd64.deb 186f0e56d90f50cd842a0407b957c058fdbf100c 11216 apache2-suexec-pristine-dbgsym_2.4.65-1~deb12u1_amd64.deb 454c07b86c98de7b4268fe478af3260c89cd48e2 146448 apache2-suexec-pristine_2.4.65-1~deb12u1_amd64.deb eabe8c877c38c13cdf59adfbcdc1976e577bf567 115796 apache2-utils-dbgsym_2.4.65-1~deb12u1_amd64.deb 5ef18915d14f3b47312c2cfde711a896f5faa9fb 213908 apache2-utils_2.4.65-1~deb12u1_amd64.deb f4b5823b13be50300ef9871a3ab98cf0c2f67e9a 11862 apache2_2.4.65-1~deb12u1_amd64-buildd.buildinfo d85908339cf9b720cd6105e4f5463873cf89c734 228464 apache2_2.4.65-1~deb12u1_amd64.deb b26824ae7672c07c5f5c2cda94375db09f0816c4 956 libapache2-mod-md_2.4.65-1~deb12u1_amd64.deb f495c171da757e32a02aa009b5bef1a8a0773ffa 1136 libapache2-mod-proxy-uwsgi_2.4.65-1~deb12u1_amd64.deb Checksums-Sha256: 29db653ff99a779d65c883ddb9fd8aa376e91e8753de0b4881fe765b9e8ae9d3 3761564 apache2-bin-dbgsym_2.4.65-1~deb12u1_amd64.deb 9930cafa85b13f1c82449fc70e0f224d680d1fa226a690e8db91f893e7b85716 1396452 apache2-bin_2.4.65-1~deb12u1_amd64.deb 256b95d5aba40830a7da4c4fe5074f34476060373dabc392576eac055fa6c3e7 320800 apache2-dev_2.4.65-1~deb12u1_amd64.deb 5116bd45a1e3dc1e24a0fae5e90446818736f3b1e9fe5ebf5529a2bea3852de4 3140 apache2-ssl-dev_2.4.65-1~deb12u1_amd64.deb 3c020c64a3c8542fd451724e5ba100bc7e0c22ea5f6533c07bb548f8f06dd49a 12384 apache2-suexec-custom-dbgsym_2.4.65-1~deb12u1_amd64.deb 68606a78be6a8f5d964626d33f4ef5e79d1070cddd4aab57a34266cf1a751cd6 147976 apache2-suexec-custom_2.4.65-1~deb12u1_amd64.deb 1f5a6c79739b0d1ba5e347639f02c7e63f46d462ad3e6980fca9175cc5c585fc 11216 apache2-suexec-pristine-dbgsym_2.4.65-1~deb12u1_amd64.deb 180d53db1d96618f0b7418e6a25fd23928315b1c425117fb1be7cfaf8ae55ac4 146448 apache2-suexec-pristine_2.4.65-1~deb12u1_amd64.deb 21196ec4969b2490b4790a6cdf6fb51bc9eb625f7beadd9d62ca05a58e60a58c 115796 apache2-utils-dbgsym_2.4.65-1~deb12u1_amd64.deb a71e36e595a1ef35c566e4491798b6e1d9aa027b2abff0ad1097311d2770ca91 213908 apache2-utils_2.4.65-1~deb12u1_amd64.deb feba5e18665767d5cb9c1de82f51c278d08b6dde01be69721a594caf6f6cb469 11862 apache2_2.4.65-1~deb12u1_amd64-buildd.buildinfo 6042097ba49f99fe497b77e5c2294f83130e521f945ca2e06badd5311baa019b 228464 apache2_2.4.65-1~deb12u1_amd64.deb a8d41f21d486bd6ad4d6686394e047bbf3c8fd94d97bdb423e58be3ac9328ed8 956 libapache2-mod-md_2.4.65-1~deb12u1_amd64.deb 4d9a53fbf47164c877cc0df71858aca8841fac8d5996304f3cf640ac2f6c2852 1136 libapache2-mod-proxy-uwsgi_2.4.65-1~deb12u1_amd64.deb Files: 6e80b18814a4e921198c842df4055404 3761564 debug optional apache2-bin-dbgsym_2.4.65-1~deb12u1_amd64.deb 4a7e27a18f30b57c1a5a56f71644d084 1396452 httpd optional apache2-bin_2.4.65-1~deb12u1_amd64.deb 53561a7833e2a32f80fb917d06b304c8 320800 httpd optional apache2-dev_2.4.65-1~deb12u1_amd64.deb 72df13bd68397cc4dfc8b839b47727b7 3140 httpd optional apache2-ssl-dev_2.4.65-1~deb12u1_amd64.deb 14837bbd57f57360234967d9f035be43 12384 debug optional apache2-suexec-custom-dbgsym_2.4.65-1~deb12u1_amd64.deb f6ab4db4471b71381bf5d87072ef7966 147976 httpd optional apache2-suexec-custom_2.4.65-1~deb12u1_amd64.deb dc9f06a318f806e30d823a5473926c11 11216 debug optional apache2-suexec-pristine-dbgsym_2.4.65-1~deb12u1_amd64.deb f4cacde25dc3fd0513f9ccbcb16322dc 146448 httpd optional apache2-suexec-pristine_2.4.65-1~deb12u1_amd64.deb e6e121134e1f9f8b66b2d6eef84a84c5 115796 debug optional apache2-utils-dbgsym_2.4.65-1~deb12u1_amd64.deb cad1b55fda3711b58c9c4850d13babb6 213908 httpd optional apache2-utils_2.4.65-1~deb12u1_amd64.deb 60587687b9d6f5f471765769ca22c3f0 11862 httpd optional apache2_2.4.65-1~deb12u1_amd64-buildd.buildinfo f042ef3758e65b195d242d2d30d12353 228464 httpd optional apache2_2.4.65-1~deb12u1_amd64.deb 3427dc4b8988ee839d3883ba64d006f5 956 oldlibs optional libapache2-mod-md_2.4.65-1~deb12u1_amd64.deb 81d041785eb76aa9645f193908f98726 1136 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.65-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHqtYLkdKRyCY94K8fUw6/tXbAmMFAmiw1pkACgkQfUw6/tXb AmMVnQ//YGqgmRS8Zj1pr94zNNajL+U7Hv4STKKC2aq3emgNV391L6nElGp0HPR6 5y25VhCBH0+ddeDf0ILsTKoJogh50+YAGBQSE02Edjv8rbEhSAU3+3drvdsu5dQy FisHGH5SLg/2AXnuoiBfEQeouf0vIsV+b1lR4QvJ5B1vVbUyVdNNPrb8Xkx+BciG XE7T4px+hl5zDf3Mmlu3bEYi/10Umo881ZF/R6wRUibU7qPkJEVG7c05NzCcuWBT jb3tv6USyaDEXXb75gSS0lOSSZ1qOdlT6c5IxJJ3ZkzvalISNn0zd4/5F50fRp2r RAiWAaVWwVawapxdHhBWtf4J+5SqKR8wyZL13P3AgnJ59Y++pjQ0zyltT6tppKNy o5+FKInKc/ydOt+IImcVOkKlE13833a3I3iax0EHhDCTfggwnTOwTvpEl0NAWtHN 8Qt5JsVEGPCaolRur92/5C0H96poln3cP95yZSyjREqksXWBlR7GfGnGsyozBuHM dd9Wej31A/3xSNwTeUeRW0Yeila4n6SZ78EMhlOZGkOjeQJiaiiAsLjCkF7N+Zkq sqEZkLTm0FVYpO6/lSiIaNNnCL+m0dRFZgoIN+yLIQiGa8PalAfTGbs57DkkjrvN ZiU7wwPDRYMDvVq8aViBTSp3djaJ7WETAS9wtmCxViImNVwad/k= =lURC -----END PGP SIGNATURE-----