Package apache2: Information

- 2.4.66 -> 2.4.67
- Fixes:
  * CVE-2026-34059: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()
  * CVE-2026-34032: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)
  * CVE-2026-33857: Off-by-one OOB reads in AJP getter functions
  * CVE-2026-33523: multiple modules: HTTP response splitting forwarding malicious status line
  * CVE-2026-33007: mod_authn_socache crash
  * CVE-2026-33006: mod_auth_digest timing attack
  * CVE-2026-29169: mod_dav_lock indirect lock crash
  * CVE-2026-29168: mod_md unrestricted OCSP response
  * CVE-2026-28780: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()
  * CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr
  * CVE-2026-23918: http2: double free and possible RCE on early reset

- 2.4.65 -> 2.4.66 (Fixes: CVE-2025-66200, CVE-2025-65082, CVE-2025-59775,
			CVE-2025-58098, CVE-2025-55753)
- tightened the default_https vhost by
  adding explicit Directory defaults (closes: #51050)
- updated Summary and Description
- built with pcre2
- enabled brotli support
- added lua and http2 modules in separate subpackages
- explicitly enabled cache_disk and socache_shmcb
- folded the downstream patchset in-tree and consolidated packaging patches
- removed apache1 legacy support
- dropped legacy configs and obsolete build options
- dropped Conflicts/Obsoletes from legacy 1.3/2.2 transitions

- 2.4.64 -> 2.4.65 (Fixes: CVE-2025-54090)