-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 29 Jul 2025 22:18:46 +0200 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: i386 Version: 2.4.65-1~deb12u1 Distribution: bookworm Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Bastien Roucariès Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Changes: apache2 (2.4.65-1~deb12u1) bookworm; urgency=medium . * Team upload . [ Yadd ] * Drop patches included in upstream * New upstream version 2.4.64 (Closes: CVE-2025-23048, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020) * New upstream version 2.4.65 (Closes: CVE-2025-54090) * Unfuzz patches . [ Bastien Roucariès ] * Add a NEWS entry following CVE-2025-23048 Checksums-Sha1: 7956a9bd090c1419d7e6e5daf5da1088e5798be0 3262804 apache2-bin-dbgsym_2.4.65-1~deb12u1_i386.deb 3939de8be0caac8636cb1a8fe830e81c472313f1 1462560 apache2-bin_2.4.65-1~deb12u1_i386.deb 551d1f2c551d5df9a30fc5d96db5ad096ab8106b 320820 apache2-dev_2.4.65-1~deb12u1_i386.deb 92a8bf0261ce7252f58ed43b435e835e382c80f4 3136 apache2-ssl-dev_2.4.65-1~deb12u1_i386.deb 903443c1d209bbcaad637bc7d686b542653ad269 11272 apache2-suexec-custom-dbgsym_2.4.65-1~deb12u1_i386.deb ce0d50ebf7614a0ba8d5fd9cc51c6adc452372e0 147952 apache2-suexec-custom_2.4.65-1~deb12u1_i386.deb 399231bf41aca5171d70c1369e6da1f4b954b629 10104 apache2-suexec-pristine-dbgsym_2.4.65-1~deb12u1_i386.deb 7fa8bea52dccf9096c71c3f9e59194824001a61e 146404 apache2-suexec-pristine_2.4.65-1~deb12u1_i386.deb 1ec77b8d12379dd254360b8d3c9bf24e8c110e0d 107952 apache2-utils-dbgsym_2.4.65-1~deb12u1_i386.deb 87ed8215550f9a306892bd70486b2aedac6b356d 218812 apache2-utils_2.4.65-1~deb12u1_i386.deb 7140b31202dafd70d2600915201311a22a9e333e 11753 apache2_2.4.65-1~deb12u1_i386-buildd.buildinfo e325a5dd77a5748ba27d8dcafb21acca25ca523e 228460 apache2_2.4.65-1~deb12u1_i386.deb 881b4bafb26662a2ad4f63ee2f4594410954913b 956 libapache2-mod-md_2.4.65-1~deb12u1_i386.deb 9e963f5e03c84c107c1c246707f49f539d137cdd 1128 libapache2-mod-proxy-uwsgi_2.4.65-1~deb12u1_i386.deb Checksums-Sha256: 9d197a56e9c2702dee16192ed18b83eb6b2d9e268d4581ec869abca55f9a53d2 3262804 apache2-bin-dbgsym_2.4.65-1~deb12u1_i386.deb ecb3908d19ff799e2bab3a784c101070a7f22cfa0d79806481c32e3a980b48b0 1462560 apache2-bin_2.4.65-1~deb12u1_i386.deb 266d5de6c142a509ce7d5015db62b8d2835b2c24022fd565314c48d0b624a1f9 320820 apache2-dev_2.4.65-1~deb12u1_i386.deb b073f8170a1bbfc9f11170e364b2cd64f1a75286566dfb8f8f6d6dae234861ee 3136 apache2-ssl-dev_2.4.65-1~deb12u1_i386.deb 91789c33d9a454e6e2c49ae90a38deecb4dab024b05789378517c44ca70af6c8 11272 apache2-suexec-custom-dbgsym_2.4.65-1~deb12u1_i386.deb 5bbf157c179d7db667a584e16801b3015ffa3cf2286d6c821f3a64253cd421c2 147952 apache2-suexec-custom_2.4.65-1~deb12u1_i386.deb 59346acda99285a6abf42d346188d6c3988f7ac643de712b208055910df6d5d5 10104 apache2-suexec-pristine-dbgsym_2.4.65-1~deb12u1_i386.deb 12e20b1e487d8290ec82642559db48d3d9d6e0a0cebdecbe23c2101a8e82ba63 146404 apache2-suexec-pristine_2.4.65-1~deb12u1_i386.deb 9d42300f4c81db5043055fb79f630682249474bb9289b26dd3e252340735697b 107952 apache2-utils-dbgsym_2.4.65-1~deb12u1_i386.deb f53fd3b8195afbc4ef04320db5720640e251d4f1f3c15553dc83d06332597feb 218812 apache2-utils_2.4.65-1~deb12u1_i386.deb 5879f19e6d02b7faa45cf4c3651c33833306ba3cee122679fa5d735df6f53b73 11753 apache2_2.4.65-1~deb12u1_i386-buildd.buildinfo f8374a8bb2441a77f73164c91aae6f647d49738d9d83bbe03279fd6e9d15ec87 228460 apache2_2.4.65-1~deb12u1_i386.deb 9ab23ecd2338a4621669071fbb883b2a65dbf2ad8aacb1c4592b0468bdecdd8a 956 libapache2-mod-md_2.4.65-1~deb12u1_i386.deb 0f377ae80594213dc53ff0afbfc5529353aa07f9835902958bb11480950b3667 1128 libapache2-mod-proxy-uwsgi_2.4.65-1~deb12u1_i386.deb Files: aadf7f905fcbe2594be6d001b9b30cee 3262804 debug optional apache2-bin-dbgsym_2.4.65-1~deb12u1_i386.deb 450630c522dfc779195652a620c2d166 1462560 httpd optional apache2-bin_2.4.65-1~deb12u1_i386.deb a93e900b1e16bdd4d4f48f0f8a551d27 320820 httpd optional apache2-dev_2.4.65-1~deb12u1_i386.deb d0e5caae8865e97bc51ce3b1e2717273 3136 httpd optional apache2-ssl-dev_2.4.65-1~deb12u1_i386.deb 681f69684133219d5f7dbc589ab56734 11272 debug optional apache2-suexec-custom-dbgsym_2.4.65-1~deb12u1_i386.deb ee0e5c0e86d2b11462f5dd7f2b0ae2a6 147952 httpd optional apache2-suexec-custom_2.4.65-1~deb12u1_i386.deb f5605242492e1e24ad9e71c5e033107c 10104 debug optional apache2-suexec-pristine-dbgsym_2.4.65-1~deb12u1_i386.deb af11dddd9b8ef5bb531072e998900831 146404 httpd optional apache2-suexec-pristine_2.4.65-1~deb12u1_i386.deb af3f15f6b87a60625d6b9fc15517c66b 107952 debug optional apache2-utils-dbgsym_2.4.65-1~deb12u1_i386.deb 55ccdf8c654163d759ab1f82c264b6ef 218812 httpd optional apache2-utils_2.4.65-1~deb12u1_i386.deb c7c75f47f6b302a1b8f0fd3be7e01261 11753 httpd optional apache2_2.4.65-1~deb12u1_i386-buildd.buildinfo 658bae7429262dcefc6bfb093217ec05 228460 httpd optional apache2_2.4.65-1~deb12u1_i386.deb a4aed3f9d95ccf405c7b8fed1eb29417 956 oldlibs optional libapache2-mod-md_2.4.65-1~deb12u1_i386.deb b1802f00b6da3e70e489f1a2159db7f7 1128 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.65-1~deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEc5vuvf2HND40bnI+8IREj/cRiTMFAmiw1kAACgkQ8IREj/cR iTNAyhAAy5Eb8BFT0QsGXUh75AlEzaFB/NFe4rkF+NQ42+BcADFLIP6l+6Ya2LJp sYMRg8GuMCDHoufD0eKHSVHxml2ibzCrhI1RYlWbZuXN7atkuYXqsbO+ujpkTHIz OHwQkKGRP01ORFfYfdX5n5T9pm4uus8ufu54DFa6tGiZXoDGpwyaafJoHO6WUHW8 +dvsrGZLsvHhkASbPgaYsfVa59IOlglpA3GuTkhbYeeyc93tqrohRKpbqhZ1k4G5 vwY6vB16L1TGoCsB7kEcnEsKn2lYnvgN442mRYkz5PSBnblxrumnReN6ae2oSJTX oWXK7t1fK+qJghWc0T1aUZ1s5cjAig1Csku88e8ClvbD8sBYsplye2Ke3AXCcLCy pgTOR8ggQb/iAxWr/u8UgtpZRPwMF6UbRrXkeWyTD5d5jlp1P4OUpHJfZSovwRSl zqe8yzgasUfj/DeBWnIxHS7hEPrHsvW0OBM/RPbrl41v6ipYD/k2my+aARyZrFRK n3ANvFa/dnWiYtKhgsPwXRXv/x5ttJtF0b97Bs4mmNF54StGpuFeSzSbXb8AS92z mQg8OuM6NJHv+SoGX0B2Wa5WyU3Z2BK/2Kql5j/rsun6viAUvDWeUdsrSfNBamS8 qk46Zw7nUwsh2Fq0qtP29SEkCpXKtMp4RT9L4+Dt92kNbvuFl8U= =Fz5J -----END PGP SIGNATURE-----