Bug#995368: libapache2-mod-proxy-uwsgi 2.0.14+20161117-3+deb9u4 - duplicated request path

[Moritz Mühlenhoff <jmm@inutil.org>]

reassign 995368 uwsgi
thanks

Am Fri, Oct 01, 2021 at 04:16:05PM +0200 schrieb Josef Kejzlar, wpj s.r.o.:
> I can confirm this regression.
> After unattended security upgrades got applied during the night, all
> our applications stopped working.
> 
> There is wrong request path sent to uwsgi server. Some times
> duplicated leading slash.
> 
> I would classify this as critical problem, all servers using uwsgi and
> libapache2-mod-proxy-uwsgi stopped working after secuity update.

Hi Philippe and Josef,
thanks for reporting! This isn't a bug in Apache (source package name
apache2), but got introduced by an update in the uwsgi source package
(which is admittedly confusing since both build Apache modules with uwsgi
in their name).

I'm reassigning the bug and adding the debian-lts list to pick this up.

Cheers,
        Moritz