-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 29 Jul 2025 22:18:46 +0200 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: arm64 Version: 2.4.65-1~deb12u1 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Bastien Roucariès Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Changes: apache2 (2.4.65-1~deb12u1) bookworm; urgency=medium . * Team upload . [ Yadd ] * Drop patches included in upstream * New upstream version 2.4.64 (Closes: CVE-2025-23048, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020) * New upstream version 2.4.65 (Closes: CVE-2025-54090) * Unfuzz patches . [ Bastien Roucariès ] * Add a NEWS entry following CVE-2025-23048 Checksums-Sha1: 207a6af177d2e6249d9ccc2cf31441368509aba2 3764748 apache2-bin-dbgsym_2.4.65-1~deb12u1_arm64.deb fcc9b97b7d49038b4efbbc01f62a662987d42d9c 1284456 apache2-bin_2.4.65-1~deb12u1_arm64.deb 9967461a3e6a964e9b7b26517f99d14bd25c7280 320808 apache2-dev_2.4.65-1~deb12u1_arm64.deb 50e01a46453d3f0b929f4874fb5d875692d27cec 3140 apache2-ssl-dev_2.4.65-1~deb12u1_arm64.deb 35012d704ef787b5e809f50aaf62324f55047baf 12480 apache2-suexec-custom-dbgsym_2.4.65-1~deb12u1_arm64.deb 5651d5b3c6ad97edc8f2213df6c348d146b15272 147756 apache2-suexec-custom_2.4.65-1~deb12u1_arm64.deb d8c8571b9f6ec133eb19592d30d17afc5e6bc0b5 11336 apache2-suexec-pristine-dbgsym_2.4.65-1~deb12u1_arm64.deb 8c7a9014b4ad12b6892d66c305ecb8eac124fb9c 146300 apache2-suexec-pristine_2.4.65-1~deb12u1_arm64.deb 67465421bc2b13f6ad72d6f7a77f45aa3329f8ae 117684 apache2-utils-dbgsym_2.4.65-1~deb12u1_arm64.deb 1f1db7f59da02fe032ee02a36f15f60bb7164ffb 211856 apache2-utils_2.4.65-1~deb12u1_arm64.deb 30c83352d17e1803f06ddfe0590487b3adef8b48 11861 apache2_2.4.65-1~deb12u1_arm64-buildd.buildinfo 44cc66fea282afffb2555ba17f23819b0388a13e 228468 apache2_2.4.65-1~deb12u1_arm64.deb 87cf0a6b7a7f56e56d26cdc633ae2f85f5c7ca74 956 libapache2-mod-md_2.4.65-1~deb12u1_arm64.deb c96eac9319b6d7df06dd0a1f7170f9ec2dd005b7 1136 libapache2-mod-proxy-uwsgi_2.4.65-1~deb12u1_arm64.deb Checksums-Sha256: da24dc62332faab48da606ec742d526cd6a606f3c6f2dee74b97d2f48ec1bdae 3764748 apache2-bin-dbgsym_2.4.65-1~deb12u1_arm64.deb 496f642f2816d81546094e4cb4bf52063f66c0ece6004a546b6d4707845ea1ab 1284456 apache2-bin_2.4.65-1~deb12u1_arm64.deb 8ab0ef32645c4681f577d18e8efbb23fc320172f40c5579eb6bc23594cff6784 320808 apache2-dev_2.4.65-1~deb12u1_arm64.deb 1812fa9b2c3ff49e7d7552132dcb2accff05e8c3eb081d46df36f642d31dff14 3140 apache2-ssl-dev_2.4.65-1~deb12u1_arm64.deb e950fb2c5fe7fc42e0c79f6b4a8ac9e08eab9cae095343231c41282aac0e7120 12480 apache2-suexec-custom-dbgsym_2.4.65-1~deb12u1_arm64.deb 40191c145fff8358e235a2c27652b0a376053c4bf052a4277749376dba996514 147756 apache2-suexec-custom_2.4.65-1~deb12u1_arm64.deb 985b212d7f289651f1251c8860bb7cb887d3a28b9461bae58d522f7d4b9b60f6 11336 apache2-suexec-pristine-dbgsym_2.4.65-1~deb12u1_arm64.deb bd9c4ff57c2d76afa2a0162dcf32ed44de9548ab1e0615140ccc00da7e42b81f 146300 apache2-suexec-pristine_2.4.65-1~deb12u1_arm64.deb 7452489ef9fe77abfc8b942ffe3410765b309852fe803efd4cb146540f1f7ada 117684 apache2-utils-dbgsym_2.4.65-1~deb12u1_arm64.deb 402a41d5770278940d39da611546af76abac46552e806d05930c5ded435585aa 211856 apache2-utils_2.4.65-1~deb12u1_arm64.deb 3dca88a1ec32487ab3bdf209231a9a9c6b72567f5cf16c51bb2eadbe7eb3653d 11861 apache2_2.4.65-1~deb12u1_arm64-buildd.buildinfo 2500b446455d45b0f38a9e8a91956f0e82eceaa6a8cbfe7fd4f082912072906d 228468 apache2_2.4.65-1~deb12u1_arm64.deb db1fa1c208021e47e5dd3f934c90a1b018f8ee898b360091927781fa2bc82de8 956 libapache2-mod-md_2.4.65-1~deb12u1_arm64.deb 50511ad3cdb9b2cf178135c279f242dd7e8a92c6bb0cf2d978be20c8f9285206 1136 libapache2-mod-proxy-uwsgi_2.4.65-1~deb12u1_arm64.deb Files: be8021a21a8e9c721561c31599b52915 3764748 debug optional apache2-bin-dbgsym_2.4.65-1~deb12u1_arm64.deb baed63ae22c473b46cf14f55ec533cfa 1284456 httpd optional apache2-bin_2.4.65-1~deb12u1_arm64.deb ebe5fe2bc66e3caaf1fdeecf32b81e7f 320808 httpd optional apache2-dev_2.4.65-1~deb12u1_arm64.deb d76258ff6f330b6fc566ec6eede3e586 3140 httpd optional apache2-ssl-dev_2.4.65-1~deb12u1_arm64.deb 88287ab9e20049b18c8f2c12b63d1e9e 12480 debug optional apache2-suexec-custom-dbgsym_2.4.65-1~deb12u1_arm64.deb 4de46eac896924e3015cf7f67a1e20ac 147756 httpd optional apache2-suexec-custom_2.4.65-1~deb12u1_arm64.deb 5f410d15e95d86b20b44ed9a6e41b299 11336 debug optional apache2-suexec-pristine-dbgsym_2.4.65-1~deb12u1_arm64.deb 45c52f21d1884aff5bfef780f4d331d4 146300 httpd optional apache2-suexec-pristine_2.4.65-1~deb12u1_arm64.deb 16ebbb9d5ff7b1fea3e2842c2400b548 117684 debug optional apache2-utils-dbgsym_2.4.65-1~deb12u1_arm64.deb 82cbed4d546173f534b9952a02f2aaa8 211856 httpd optional apache2-utils_2.4.65-1~deb12u1_arm64.deb 9af60ab214cbe793fb19afca151b77b3 11861 httpd optional apache2_2.4.65-1~deb12u1_arm64-buildd.buildinfo 3a150bcf051a71b79bb2a6db04d992fb 228468 httpd optional apache2_2.4.65-1~deb12u1_arm64.deb 639b699623d6db3edf56ce45e78206d9 956 oldlibs optional libapache2-mod-md_2.4.65-1~deb12u1_arm64.deb 2f275cc1cad70d21d654fdd362ed37b6 1136 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.65-1~deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmiw2q8ACgkQOQKMdMnE H5O8xA//ZUX0CN+jNAyCy+pHkzmCX4Ecscv4KuAZv2xny9gs7NKWU0hCVjcXIfPG jBwg80zsSwQq3R022bWveQa5ywbr0G0PnbkE951gLOXslP+w/Jv0VtA8VLd2zSiu 2ZweiyN1CyMzoJgUuxdhztEMXuh42vItmSMCCJk/HoDO2ZknPrbIpd6F1bv+7GrT uDJ5rLGXvMWcLb2ITeKXCw9UnApHXV9W3Uge4a37ejHQ7QDfoyWaOJ3CVbpAH2kx /wCLkuz/mPDAi2OpSEzYWvZEka+MBjNU8ahIC4i8kzMj9ShMqwdGQdWbyTIhguGP ktrQvqSQcEFZRJI27b7ZCru1swILTFM8z5zPfr1sjjpnuDowcmRuByjxxqIle8ew Ds1+BZaNU0pjGiWWz972gQyrnG95WGVz2tbDk3Cmusk32RXwPlRC6SfXYPZ5GtvN D1eAz6pe4c3AT6G2VDLt+5JxXT+RVChUmaLW8v8wEVKlx5vZVzJSjsS92zI63GwQ BDmLZ7tcTTCcR2gW2/nSr0qDjYRtfCNOa3RW/Dzi4nTKGBkkTafkJR1dk+3Bx2ZU /ua0TFEZQ87RETJzMntdjIRrB05f9OPCbWaqSB2FZYKZl4b+6CfqBBI2KqpbHdNV q0wrJBHF0Qms3woS8bq0G/ssc/6IdGoVRRAC4B6unjFNT4Mddks= =00md -----END PGP SIGNATURE-----