Hi Xavier, On Thu, Oct 01, 2026 at 07:02:40PM +0200, Xavier Guimard wrote: > Package: release.debian.org > Severity: normal > Tags: trixie > X-Debbugs-Cc: [email protected], [email protected] > Control: affects -1 + src:apache2 > User: [email protected] > Usertags: pu > > [ Reason ] > A lot of low/medium vulnerabilities were published in apache2 version > 2.4.69. This project is ~LTS, so we decided to follow upstream changes
We could do this as well via a DSA, but it should be exposed first in unstable for a while in case of reported regressions. Btw, I think CVE-2026-59685 should not be listed as this affects only Apache HTTP Server when using on Windows? Regards, Salvatore
