-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 29 Jul 2025 22:18:46 +0200 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: armhf Version: 2.4.65-1~deb12u1 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Bastien Roucariès Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Changes: apache2 (2.4.65-1~deb12u1) bookworm; urgency=medium . * Team upload . [ Yadd ] * Drop patches included in upstream * New upstream version 2.4.64 (Closes: CVE-2025-23048, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020) * New upstream version 2.4.65 (Closes: CVE-2025-54090) * Unfuzz patches . [ Bastien Roucariès ] * Add a NEWS entry following CVE-2025-23048 Checksums-Sha1: 94eec91febb96e10d5b36787b9fd9ef15c7a9699 3349016 apache2-bin-dbgsym_2.4.65-1~deb12u1_armhf.deb b84cdfc15891b2c81cab4582f17e9ca3083532d0 1216440 apache2-bin_2.4.65-1~deb12u1_armhf.deb d79bdc2880e77f86ca1f81b8bb4758cce61cd2a6 320824 apache2-dev_2.4.65-1~deb12u1_armhf.deb cbe0018dabb82e8f6a914ab8a00d14f4ea815f0b 3140 apache2-ssl-dev_2.4.65-1~deb12u1_armhf.deb 0e6d78b5d03e52cea8e15a2da034aa9730df3eff 12256 apache2-suexec-custom-dbgsym_2.4.65-1~deb12u1_armhf.deb 891b59e875be1806918c248ec9ac6ee4f3616307 147216 apache2-suexec-custom_2.4.65-1~deb12u1_armhf.deb c90b24565657aec55249b0f48a37ac139e7a4a06 11028 apache2-suexec-pristine-dbgsym_2.4.65-1~deb12u1_armhf.deb 9b2c33c4441a902a5494c45de99e22ba6e6d8f2a 145756 apache2-suexec-pristine_2.4.65-1~deb12u1_armhf.deb 50d3a45fd6061ee5c9eb51464f965a89a3f25b49 118428 apache2-utils-dbgsym_2.4.65-1~deb12u1_armhf.deb d7e1e1137cf5f6f4c6b887e0fc65b2b056296056 213688 apache2-utils_2.4.65-1~deb12u1_armhf.deb 0308bb1f8c59bf9437f306bfe624f6a281a875b4 11705 apache2_2.4.65-1~deb12u1_armhf-buildd.buildinfo 3f8c151c91d135c0658657f4034f8f8c482c070a 228468 apache2_2.4.65-1~deb12u1_armhf.deb fe884decf92d035f365463e0d114c2987b49c5ce 956 libapache2-mod-md_2.4.65-1~deb12u1_armhf.deb e122a7a11aab8147f4e9b2e0f92928bca3d7b943 1136 libapache2-mod-proxy-uwsgi_2.4.65-1~deb12u1_armhf.deb Checksums-Sha256: 3de785ac92fe64fde5ce51929f3871127de235aebc43a19a32cecdc70c78bdef 3349016 apache2-bin-dbgsym_2.4.65-1~deb12u1_armhf.deb 3e9a23552760c55b8bcfa1f3caf5ac00bda241d2df81ceda06c12a2ea8fd4558 1216440 apache2-bin_2.4.65-1~deb12u1_armhf.deb 6ae1cadf88c487633da82021d6255c658f445a8850f9d3935295c8c07ec55dad 320824 apache2-dev_2.4.65-1~deb12u1_armhf.deb 572735f5d9aba9e19a7e6e5c99154a9dc809540b117e3dad02e81e50a580288f 3140 apache2-ssl-dev_2.4.65-1~deb12u1_armhf.deb 1ea5c52b3274b15849fe6837805c87790ad52a4bb20cdc440a8b272c26cb1527 12256 apache2-suexec-custom-dbgsym_2.4.65-1~deb12u1_armhf.deb 7f37fe3a1203faa6b1b03a7e66484d19f4c6faa9aaaa06c59b99ede05feacd3b 147216 apache2-suexec-custom_2.4.65-1~deb12u1_armhf.deb 46dca7af26d0cf5f8cf65bc6492859ec96238fad69f131d2e23cca8510fd76cd 11028 apache2-suexec-pristine-dbgsym_2.4.65-1~deb12u1_armhf.deb e6ed0722ab25538a6e8469bdde9188a952dad8574e597d4fe26fb8842da9ab25 145756 apache2-suexec-pristine_2.4.65-1~deb12u1_armhf.deb 2daf49561cf8383dedfd2cc44caa7de96dd907fb842cc5e087e22961339c26a7 118428 apache2-utils-dbgsym_2.4.65-1~deb12u1_armhf.deb 99b40981d749181df9057fe3981d1e1f513784ae8a80795dd6cb7fdeb9307c9a 213688 apache2-utils_2.4.65-1~deb12u1_armhf.deb db18a030afe17316eefec3017c37092b7727100e4b95d24eefd269804d6eac7a 11705 apache2_2.4.65-1~deb12u1_armhf-buildd.buildinfo 6990b20b4e1af9e64098813dd9a15c92b5dcbc7e7de26cdcc8e3cb3e403b0600 228468 apache2_2.4.65-1~deb12u1_armhf.deb 57b98e312d088aba812fcf59e82697b6f8b5472b58f5b63090bb55e39474529b 956 libapache2-mod-md_2.4.65-1~deb12u1_armhf.deb 7f0c2f92ae57b00c47df1646156fa4dd8af33c0aba2cf2ff68072bb138dd819b 1136 libapache2-mod-proxy-uwsgi_2.4.65-1~deb12u1_armhf.deb Files: 8add7d3a13ddedf2cac14a581b711845 3349016 debug optional apache2-bin-dbgsym_2.4.65-1~deb12u1_armhf.deb c2de7bd173f3cc7f54ac0ccd82490de6 1216440 httpd optional apache2-bin_2.4.65-1~deb12u1_armhf.deb d35e5313668fb53ff77fdb206bb3ba2b 320824 httpd optional apache2-dev_2.4.65-1~deb12u1_armhf.deb fb7de2b5da478550a221943e930c191f 3140 httpd optional apache2-ssl-dev_2.4.65-1~deb12u1_armhf.deb d62cd4d26b4199a48b7ac24988049789 12256 debug optional apache2-suexec-custom-dbgsym_2.4.65-1~deb12u1_armhf.deb 5029b2c98c46e2656f31eb646c29c776 147216 httpd optional apache2-suexec-custom_2.4.65-1~deb12u1_armhf.deb c36346460b93d0189d586747ae5af465 11028 debug optional apache2-suexec-pristine-dbgsym_2.4.65-1~deb12u1_armhf.deb f2e3d3486b89ec475d5f9ac3b769c072 145756 httpd optional apache2-suexec-pristine_2.4.65-1~deb12u1_armhf.deb 0dd7553c80ec7d459b51873e690bc055 118428 debug optional apache2-utils-dbgsym_2.4.65-1~deb12u1_armhf.deb 7aee11a7c99f37c24e021e01aa42c147 213688 httpd optional apache2-utils_2.4.65-1~deb12u1_armhf.deb b9eb71bba828ece94cf945017208c6f0 11705 httpd optional apache2_2.4.65-1~deb12u1_armhf-buildd.buildinfo 0387e1e631459e786a09f52a4757d6d1 228468 httpd optional apache2_2.4.65-1~deb12u1_armhf.deb 75c293d717ca3501d3e651fb98db699f 956 oldlibs optional libapache2-mod-md_2.4.65-1~deb12u1_armhf.deb 15501aa2b948d570cc53288f330c7341 1136 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.65-1~deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEegRwmIwj8f99iF4m4CwlMGxHD8UFAmiw2rwACgkQ4CwlMGxH D8VIuhAAsQ9XzgqAn37bp4N6Ndqn0yNsysFX5dHWeujodedWFOq2GqRVQzw/MgYb V4gL4d6h5TsOKsINmzH1IMn7Sv9DaRPrScO/VdZGa96y42vTTACMSgFmDNfRXwk4 Hsc4VoXvqd1fvewE9D64gBFA5yIbKElBVvoNSW02XP1OpBwH+xW7a6habk2hpHHD wp6tALgECueG+/5Nh03G0btfzymC64p9itPRGaIgRY64obQaRkdfnZG/PHNc2yVs QGoFPEl99J6PRjfTf3Y5eUKyDxBt5SUj88d0hHHWOxYN7b4gybRB7lUUwVwzlOoJ ecHMeEn6vdb2gASGGWB2jntnyRJt9KEj9uuSYpH02rJjgVMAE7lqxO+fA7y5NWav TlvlrWbKGojryJ1JU4gjFfjAWVXqLw1EkHCn20WqfPu40f9tk0TjuKhMhXsT0YUN zpD3dRxs+nXcawlm5Yi++/nT1y+kMX9o8aaG/npZ6/GfJDxK+jyUUVLBCPC5w/Vu t+7MA5RDqrQxg34UNQ5K8/lqzhhh/aFFm1Hc3Qo3HrI3WrvOiX3jt/oQf9qZDW/k mWg17w+9pVmCnN5UieGcdMpJ6ARleSEqe9jpsDdPYPcxkdPhpKgsElfJmnyLdGNC U7uAXpLAqSHy18FpSY4vJHI82qU7IlNpcE2jF9NWhogC/fTgZA4= =8373 -----END PGP SIGNATURE-----