[pkg-uWSGI-devel] Bug#995368: libapache2-mod-proxy-uwsgi 2.0.14+20161117-3+deb9u4 - duplicated request path

[Philippe Accorsi]

Hi,

I work on this project https://github.com/tracim/tracim and we saw the 
problem with the docker images created with files available here 
https://github.com/tracim/tracim/tree/develop/tools_docker/Debian_Uwsgi/ .

We create docker images on Debian Stretch and install package 
libapache2-mod-proxy-uwsgi.

We use socket connection between Apache and uwsgi. In Apache we use 
(more detail available directly in repository):

ProxyPassMatch ^/$ uwsgi://localhost:8081/

And in uwsgi configuration file we use (more detail available directly 
in repository):

plugins = python3
module = wsgi.web:application
socket = :8081

Regards,
Philippe Accorsi

Le 05/10/2021 à 13:04, Sylvain Beucler a écrit :
> Thank you Moritz for forwarding the bug report.
>
> Josef, Philippe, can you provide further information, such anas Apache 
> configuration excerpts, d details about your apache/uwsgi setup?
>
> I did not experience issues with my tests using a simple Django 
> application (cf. https://wiki.debian.org/LTS/TestSuites/uwsgi )
> so currently I cannot reproduce the problem.
>
> Regards,
> Sylvain Beucler
> Debian LTS Team
>
> On 05/10/2021 10:36, Moritz Mühlenhoff wrote:
>> reassign 995368 uwsgi
>> thanks
>>
>> Am Fri, Oct 01, 2021 at 04:16:05PM +0200 schrieb Josef Kejzlar, wpj 
>> s.r.o.:
>>> I can confirm this regression.
>>> After unattended security upgrades got applied during the night, all
>>> our applications stopped working.
>>>
>>> There is wrong request path sent to uwsgi server. Some times
>>> duplicated leading slash.
>>>
>>> I would classify this as critical problem, all servers using uwsgi and
>>> libapache2-mod-proxy-uwsgi stopped working after secuity update.
>>
>> Hi Philippe and Josef,
>> thanks for reporting! This isn't a bug in Apache (source package name
>> apache2), but got introduced by an update in the uwsgi source package
>> (which is admittedly confusing since both build Apache modules with 
>> uwsgi
>> in their name).
>>
>> I'm reassigning the bug and adding the debian-lts list to pick this up.
-- 

Bien « collaborativement »,

Accorsi Philippe
Administrateur Système et Support Technique


Le logiciel de collaboration Libre MadeinFrance conçu et édité par Algoo SAS
e-Mail : philippe.accorsi at algoo.fr <mailto:philippe.accorsi at algoo.fr>
Tel : 09 72 49 72 20
Web : www.algoo.fr <https://www.algoo.fr>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-uwsgi-devel/attachments/20211005/9573ac44/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pmgoieopfjefdkfb.png
Type: image/png
Size: 5149 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-uwsgi-devel/attachments/20211005/9573ac44/attachment.png>