[ubuntu/resolute-proposed] apache2 2.4.66-2ubuntu2 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Thu Mar 5 17:53:16 UTC 2026


apache2 (2.4.66-2ubuntu2) resolute; urgency=medium

  * SECURITY REGRESSION: mod_md setting MDStapleOthers is ignored breaking
    OCSP for some domains (LP: 2142766)
    - debian/patches/CVE-2025-55753-3.patch: update mod_md to version
      2.6.7 which fixes a regression in MDStapleOthers.

Date: Thu, 05 Mar 2026 12:18:22 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/apache2/2.4.66-2ubuntu2
-------------- next part --------------
Format: 1.8
Date: Thu, 05 Mar 2026 12:18:22 -0500
Source: apache2
Built-For-Profiles: noudeb
Architecture: source
Version: 2.4.66-2ubuntu2
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 apache2 (2.4.66-2ubuntu2) resolute; urgency=medium
 .
   * SECURITY REGRESSION: mod_md setting MDStapleOthers is ignored breaking
     OCSP for some domains (LP: 2142766)
     - debian/patches/CVE-2025-55753-3.patch: update mod_md to version
       2.6.7 which fixes a regression in MDStapleOthers.
Checksums-Sha1:
 464d8c7f5e4917829fbf55874abb04f19a56cee8 3442 apache2_2.4.66-2ubuntu2.dsc
 7a2124207e9697d1dbbc4445b40a56bf22913436 854092 apache2_2.4.66-2ubuntu2.debian.tar.xz
 91796975a2c232694c629d2fc50ba4e901bed3d3 9665 apache2_2.4.66-2ubuntu2_source.buildinfo
Checksums-Sha256:
 a032cce300246c4f38e7fe8416bc295a36b052ca6e943b32675d8c15a9045d12 3442 apache2_2.4.66-2ubuntu2.dsc
 a677b329cc4f86f3b24f0ed809c3922acf56f3c78bb011abca071b03919aeb95 854092 apache2_2.4.66-2ubuntu2.debian.tar.xz
 17534d5daf8217544897f9455a58489a25bdc00959c919390286974cee25577b 9665 apache2_2.4.66-2ubuntu2_source.buildinfo
Files:
 7428c48cf97c3673e061c7470c46e3ad 3442 httpd optional apache2_2.4.66-2ubuntu2.dsc
 196c541cffefba48371f6f105532097d 854092 httpd optional apache2_2.4.66-2ubuntu2.debian.tar.xz
 f7c7b90e30ae90957b406746211c9856 9665 httpd optional apache2_2.4.66-2ubuntu2_source.buildinfo
Original-Maintainer: Debian Apache Maintainers <debian-apache at lists.debian.org>


More information about the Resolute-changes mailing list