Bug#1060765: libapreq2-3: Apache2::Upload v2.17 clobbering remaining CGI parameters

[Randolf Richardson <randolf+debian@richardson.tw>]

Package: libapreq2-3
Version: 2.17-3~bpo12+1
Severity: important
X-Debbugs-Cc: randolf+debian@richardson.tw

 Has anyone else encountered this problem?  If so, did you find a 
solution?  (If so, what got it working for you?)

Dear Maintainer,

 I just recently upgraded my systems to Debian 12, and along with it 
came modperl_2.17.  Overall, this release is working very well, 
except for one thing...

 Handling CGI parameters in HTML forms that support file attachments, 
which results all CGI parameters after the file (whether a user 
attaches a file or not makes no difference) are missing.

 For any HTML input fields that I move before the file attachment 
input element, then then their CGI parameters come through, while all 
CGI parameters after the first file input field remain missing.

 Any HTML forms that don't have any file input fiels are working 
correctly.

  <form method=post enctype=multipart/form-data>
   Text: <input name=one type=text>
  <p>
   File: <input name=file type=file>
  <p>
   More: <input name=more type=text>
  <p>
   <input type=submit value=Submit>
  </form>

 In my handling code, using $R->param('one') always functions as 
expected, but $R->param('more') returns undef.

 The solution was to download the source code for APREQ2 v2.18, and
compile and install it.  This resolved the problem.

 If the libapreq2-3 package was to be upgraded from v2.17 to v2.18,
this would resolve this problem for everyone who relies on this
package, particularly when they use any code that processes file
uploads from web site users, or introduces new code that processes
file uploads.

 Thanks!

-- System Information:
Debian Release: 12.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-17-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libapreq2-3 depends on:
ii  libapr1      1.7.2-3
ii  libaprutil1  1.6.3-1
ii  libc6        2.36-9+deb12u3

Versions of packages libapreq2-3 recommends:
ii  libapache2-mod-apreq2  2.17-3~bpo12+1

libapreq2-3 suggests no packages.

-- no debconf information