[ubuntu/resolute-proposed] apache2 2.4.66-2ubuntu1 (Accepted)

Hector Cao hector.cao at canonical.com
Mon Jan 19 16:30:16 UTC 2026 

apache2 (2.4.66-2ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2138379). Remaining changes:
    - d/index.html, d/icons/ubuntu-logo.png, d/apache2.postrm,
      d/source/include-binaries, d/t/check-ubuntu-branding: Replace
      Debian with Ubuntu on default homepage.
      (LP #1966004, LP #1947459)
    - d/apache2.py, d/apache2-bin.install: Add apport hook
      (LP #609177)
    - d/c/m/setenvif.conf: Add dolphin and Konqueror/5 careful redirection so
      that directories can be deleted via webdav. (LP #1927742)
    - d/debhelper/apache2-maintscript-helper: Allow execution when called from a
      postinst script through a trigger (i.e., postinst triggered).
      Thanks to Roel van Meer. (Closes: #1060450)
      (LP #2038912)
    - d/index.html, d/apache2.postrm: Fix https link to apache
      documentation.
      (LP #2045055)

apache2 (2.4.66-2) unstable; urgency=medium

  * Update test framework
  * Parallelize tests when more than 3 CPUs are available

apache2 (2.4.66-1) unstable; urgency=medium

  [ Laurent Bigonville ]
  * Enable systemd module (Closes: #860087).
  * debian/apache2ctl: Fix the restart and greceful when using system.
    When apache is not running and restart or greceful is called, apache
    was running in the user cgroup and system was be confused
    (Closes: #927302).
    This will also avoid to leak fd to apache
    (Closes: #713967).

  [ Helmut Grohne ]
  * Fix FTCBFS: (Closes: #913094)
    + Annotate perl build dependency with :any.
    + cross.patch: Use AC_PATH_TOOL to find pkg-config.
    + Generate server/test_char.h ahead of the build

  [ Jason Perrin ]
  * Fix packaging steps undo setting of setuid bit
    (Closes: #900612)

  [ Bastien Roucariès]
  * Harden systemd services. Set ProtectSystem=full
    ProtectHome=read-only, RestrictSUIDSGID=yes.
    This may break read-write CGI script to /home and
    WebDaV or other CGI/php/lua uses.
  * Move /var/run to /run and /var/lock to /run/lock
  * Allow CAP_SYS_CHROOT for chroot
    (Closes: #1091855)
  * Remove apache2 IPC

  [ Moritz Schlarb ]
  * Support Rules-Requires-Root: no (Closes: #1105015)

  [ Yadd ]
  * New upstream version (Closes: #1121926, CVE-2025-55753, CVE-2025-58098,
    CVE-2025-59775, CVE-2025-65082, CVE-2025-66200)

Date: Wed, 14 Jan 2026 16:39:27 +0100
Changed-By: Hector Cao <hector.cao at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Lukas Märdian <lukas.maerdian at canonical.com>
https://launchpad.net/ubuntu/+source/apache2/2.4.66-2ubuntu1
-------------- next part --------------
Format: 1.8
Date: Wed, 14 Jan 2026 16:39:27 +0100
Source: apache2
Built-For-Profiles: noudeb
Architecture: source
Version: 2.4.66-2ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Hector Cao <hector.cao at canonical.com>
Closes: 713967 860087 900612 913094 927302 1060450 1091855 1105015 1121926
Launchpad-Bugs-Fixed: 2138379
Changes:
 apache2 (2.4.66-2ubuntu1) resolute; urgency=medium
 .
   * Merge with Debian unstable (LP: #2138379). Remaining changes:
     - d/index.html, d/icons/ubuntu-logo.png, d/apache2.postrm,
       d/source/include-binaries, d/t/check-ubuntu-branding: Replace
       Debian with Ubuntu on default homepage.
       (LP #1966004, LP #1947459)
     - d/apache2.py, d/apache2-bin.install: Add apport hook
       (LP #609177)
     - d/c/m/setenvif.conf: Add dolphin and Konqueror/5 careful redirection so
       that directories can be deleted via webdav. (LP #1927742)
     - d/debhelper/apache2-maintscript-helper: Allow execution when called from a
       postinst script through a trigger (i.e., postinst triggered).
       Thanks to Roel van Meer. (Closes: #1060450)
       (LP #2038912)
     - d/index.html, d/apache2.postrm: Fix https link to apache
       documentation.
       (LP #2045055)
 .
 apache2 (2.4.66-2) unstable; urgency=medium
 .
   * Update test framework
   * Parallelize tests when more than 3 CPUs are available
 .
 apache2 (2.4.66-1) unstable; urgency=medium
 .
   [ Laurent Bigonville ]
   * Enable systemd module (Closes: #860087).
   * debian/apache2ctl: Fix the restart and greceful when using system.
     When apache is not running and restart or greceful is called, apache
     was running in the user cgroup and system was be confused
     (Closes: #927302).
     This will also avoid to leak fd to apache
     (Closes: #713967).
 .
   [ Helmut Grohne ]
   * Fix FTCBFS: (Closes: #913094)
     + Annotate perl build dependency with :any.
     + cross.patch: Use AC_PATH_TOOL to find pkg-config.
     + Generate server/test_char.h ahead of the build
 .
   [ Jason Perrin ]
   * Fix packaging steps undo setting of setuid bit
     (Closes: #900612)
 .
   [ Bastien Roucariès]
   * Harden systemd services. Set ProtectSystem=full
     ProtectHome=read-only, RestrictSUIDSGID=yes.
     This may break read-write CGI script to /home and
     WebDaV or other CGI/php/lua uses.
   * Move /var/run to /run and /var/lock to /run/lock
   * Allow CAP_SYS_CHROOT for chroot
     (Closes: #1091855)
   * Remove apache2 IPC
 .
   [ Moritz Schlarb ]
   * Support Rules-Requires-Root: no (Closes: #1105015)
 .
   [ Yadd ]
   * New upstream version (Closes: #1121926, CVE-2025-55753, CVE-2025-58098,
     CVE-2025-59775, CVE-2025-65082, CVE-2025-66200)
Checksums-Sha1:
 a0662e97af2daa54fb950074d9f0d4815fa7cb5b 3442 apache2_2.4.66-2ubuntu1.dsc
 9a2de37ab3a9e4603a0a98f4e2255a6bfed005d4 9828043 apache2_2.4.66.orig.tar.gz
 1206e4ebb8ca53bdfc0dfdfc1745e83513d3e048 852976 apache2_2.4.66-2ubuntu1.debian.tar.xz
 fe1f8b3091632149277c8329fc863e8c32e28748 9439 apache2_2.4.66-2ubuntu1_source.buildinfo
Checksums-Sha256:
 d666ba4b544c752c98fb9ee96e7bea034fe6c531300c9fbe46c0b42254cab39d 3442 apache2_2.4.66-2ubuntu1.dsc
 442184763b60936471b88a91275f79d2407733b7aac27e345f270e8bc31c3d49 9828043 apache2_2.4.66.orig.tar.gz
 d0a6696966e438e9d4e479f3e23eb8a1ace812f7b627d1f94265dce873079c75 852976 apache2_2.4.66-2ubuntu1.debian.tar.xz
 cc4fe56b941dc4ec096ca6be3594c754c83f2592fd693d5cfe24f021729881e1 9439 apache2_2.4.66-2ubuntu1_source.buildinfo
Files:
 ee2a5321c7fd3ef39d5bfd55640a351e 3442 httpd optional apache2_2.4.66-2ubuntu1.dsc
 91b20bb90cf7d1eeb225e5b7246ce93d 9828043 httpd optional apache2_2.4.66.orig.tar.gz
 3946a38729b917600a99f34c754d23d6 852976 httpd optional apache2_2.4.66-2ubuntu1.debian.tar.xz
 1a4b42ec4d09b37741ae5adfec37cf04 9439 httpd optional apache2_2.4.66-2ubuntu1_source.buildinfo
Original-Maintainer: Debian Apache Maintainers <debian-apache at lists.debian.org>
Vcs-Git: https://git.launchpad.net/~slyon/ubuntu/+source/apache2
Vcs-Git-Commit: 690ac9411cbfafd771e5a9221d18aabb99411ef9
Vcs-Git-Ref: refs/heads/merge-lp2138379-resolute

More information about the Resolute-changes mailing list