Package: libapache2-mod-proxy-uwsgi Version: 2.4.38-3+deb10u6 Severity: important
Dear Maintainer, after installing version 2.4.38-3+deb10u6 our uwsgi webservice did not work anymore. The apache2 config contains the line ProxyPass /networks/v1/ unix:/var/run/uwsgi/networks-api.socket|uwsgi://networks/v1/ retry=0 A request to https://server.uni-paderborn.de/networks/v1/name/imt_infra_ntp used to result in PATH_INFO set to "/name/imt_infra_ntp", so stripping off the first two directories "/networks/v1/" as set in the config. Version 2.4.38-3+deb10u6 contains a security fix for setting PATH_INFO, but it seems to get confused with directories: In our case PATH_INFO is set to "/v1/name/imt_infra_ntp" which renders our uwsgi webservice useless. Thanks for fixing, Christopher -- System Information: Debian Release: 10.11 APT prefers oldstable-updates APT policy: (500, 'oldstable-updates'), (500, 'oldstable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-18-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages libapache2-mod-proxy-uwsgi depends on: ii apache2 2.4.38-3+deb10u5 libapache2-mod-proxy-uwsgi recommends no packages. libapache2-mod-proxy-uwsgi suggests no packages. -- no debconf information