[ubuntu/resolute-proposed] apache2 2.4.65-3ubuntu1 (Accepted)

[Renan Rodrigo]

apache2 (2.4.65-3ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2126015). Remaining changes:
    - d/index.html, d/icons/ubuntu-logo.png, d/apache2.postrm,
      d/source/include-binaries, d/t/check-ubuntu-branding: Replace
      Debian with Ubuntu on default homepage.
      (LP #1966004, LP #1947459)
    - d/apache2.py, d/apache2-bin.install: Add apport hook
      (LP #609177)
    - d/c/m/setenvif.conf: Add dolphin and Konqueror/5 careful redirection so
      that directories can be deleted via webdav. (LP #1927742)
    - d/debhelper/apache2-maintscript-helper: Allow execution when called from a
      postinst script through a trigger (i.e., postinst triggered).
      Thanks to Roel van Meer. (Closes: #1060450)
      (LP #2038912)
    - d/index.html, d/apache2.postrm: Fix https link to apache
      documentation.
      (LP #2045055)
  * Dropped changes:
    - d/p/CVE-2025-54090.patch: fix return code in
      modules/mappers/mod_rewrite.c. (CVE-2025-54090)
      [ Applied upstream in version 2.4.65 ]

apache2 (2.4.65-3) unstable; urgency=medium

  * Change default LANG in envvars from C to C.UTF-8
    (Closes: #787584)
  * systemd service apache2 is aliased to httpd
    (Closes: #915855)
  * document a2* environment files in man page
    (Closes: #880421)
  * Failing test in its test suite
    (Closes: #1107289, LP: #2112429)
  * Restart on-abnormal instead of on-abort
    (Closes: #1106280)
  * Allow triggers to use maintscript helper to restart apache
    (LP: #2038912)

apache2 (2.4.65-2) unstable; urgency=high

  * Fix SSLProtocol has a duplicate "all"
    (Closes: #1109839)
  * Warn about misconfigured load balancer following fix of
    CVE-2025-23048.

apache2 (2.4.65-1) unstable; urgency=medium

  * New upstream version 2.4.65 (Closes: CVE-2025-54090)
  * Unfuzz patch

apache2 (2.4.64-2) UNRELEASED; urgency=medium

  * Per RFC 8996 disable by default TLS 1.0 and TLS 1.1
    (Closes: #943415)

Date: Mon, 17 Nov 2025 09:22:55 -0300
Changed-By: Renan Rodrigo <rr at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/apache2/2.4.65-3ubuntu1
-------------- next part --------------
Format: 1.8
Date: Mon, 17 Nov 2025 09:22:55 -0300
Source: apache2
Built-For-Profiles: noudeb
Architecture: source
Version: 2.4.65-3ubuntu1
Distribution: resolute
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Renan Rodrigo <rr at ubuntu.com>
Closes: 787584 880421 915855 943415 1060450 1106280 1107289 1109839
Launchpad-Bugs-Fixed: 2038912 2112429 2126015
Changes:
 apache2 (2.4.65-3ubuntu1) resolute; urgency=medium
 .
   * Merge with Debian unstable (LP: #2126015). Remaining changes:
     - d/index.html, d/icons/ubuntu-logo.png, d/apache2.postrm,
       d/source/include-binaries, d/t/check-ubuntu-branding: Replace
       Debian with Ubuntu on default homepage.
       (LP #1966004, LP #1947459)
     - d/apache2.py, d/apache2-bin.install: Add apport hook
       (LP #609177)
     - d/c/m/setenvif.conf: Add dolphin and Konqueror/5 careful redirection so
       that directories can be deleted via webdav. (LP #1927742)
     - d/debhelper/apache2-maintscript-helper: Allow execution when called from a
       postinst script through a trigger (i.e., postinst triggered).
       Thanks to Roel van Meer. (Closes: #1060450)
       (LP #2038912)
     - d/index.html, d/apache2.postrm: Fix https link to apache
       documentation.
       (LP #2045055)
   * Dropped changes:
     - d/p/CVE-2025-54090.patch: fix return code in
       modules/mappers/mod_rewrite.c. (CVE-2025-54090)
       [ Applied upstream in version 2.4.65 ]
 .
 apache2 (2.4.65-3) unstable; urgency=medium
 .
   * Change default LANG in envvars from C to C.UTF-8
     (Closes: #787584)
   * systemd service apache2 is aliased to httpd
     (Closes: #915855)
   * document a2* environment files in man page
     (Closes: #880421)
   * Failing test in its test suite
     (Closes: #1107289, LP: #2112429)
   * Restart on-abnormal instead of on-abort
     (Closes: #1106280)
   * Allow triggers to use maintscript helper to restart apache
     (LP: #2038912)
 .
 apache2 (2.4.65-2) unstable; urgency=high
 .
   * Fix SSLProtocol has a duplicate "all"
     (Closes: #1109839)
   * Warn about misconfigured load balancer following fix of
     CVE-2025-23048.
 .
 apache2 (2.4.65-1) unstable; urgency=medium
 .
   * New upstream version 2.4.65 (Closes: CVE-2025-54090)
   * Unfuzz patch
 .
 apache2 (2.4.64-2) UNRELEASED; urgency=medium
 .
   * Per RFC 8996 disable by default TLS 1.0 and TLS 1.1
     (Closes: #943415)
Checksums-Sha1:
 41d0599d203a2a0ee5ed872e9059e5af2bad1fed 3375 apache2_2.4.65-3ubuntu1.dsc
 7b23159065cdd739bb9f630d8295fae0e8c0b727 9814591 apache2_2.4.65.orig.tar.gz
 0c1daec63eaf4e6eba4a0f0518f1b074c5b5bc35 846560 apache2_2.4.65-3ubuntu1.debian.tar.xz
 48415bd7158db70cb635910204ee67c2ebd37cd9 8811 apache2_2.4.65-3ubuntu1_source.buildinfo
Checksums-Sha256:
 53e89e2a2c23195d118dfacd5ff80176a89e6b01cef3fdcd564b5ff3c5b009d8 3375 apache2_2.4.65-3ubuntu1.dsc
 4f92861a50325c6d1046ebad5d814bff0d4169ada8cc265655f32b7f1ba4be1b 9814591 apache2_2.4.65.orig.tar.gz
 11e0bc8bd405629d63dea36c6195bca7c2bc8f6fb5a55fbbc46d321afc4b22c3 846560 apache2_2.4.65-3ubuntu1.debian.tar.xz
 0e57649bf3d3674af18b276904235a85c2b49975287c5f68c73643d465931806 8811 apache2_2.4.65-3ubuntu1_source.buildinfo
Files:
 bf07504f24a8969e89a78d8ec62db52c 3375 httpd optional apache2_2.4.65-3ubuntu1.dsc
 e7bc55dca2ff88a81da208ab50b3f8a7 9814591 httpd optional apache2_2.4.65.orig.tar.gz
 01dea24463f1bd0f771636734a1d3b46 846560 httpd optional apache2_2.4.65-3ubuntu1.debian.tar.xz
 94aa2cf4e0e939d99c1b0792e13c9570 8811 httpd optional apache2_2.4.65-3ubuntu1_source.buildinfo
Original-Maintainer: Debian Apache Maintainers <debian-apache at lists.debian.org>
Vcs-Git: https://git.launchpad.net/~rr/ubuntu/+source/apache2
Vcs-Git-Commit: 8d1a96455774ea01fe22dc61741bae313ae84861
Vcs-Git-Ref: refs/heads/merge-lp2126015-resolute