Apache2 removing content (body) of proxied requests after upgrade USN-5487-1

[Tolga Özgan]

Hi There,
we have an Ubuntu 14.04 with ESM. The Apache is used as a reverse proxy for localhost micro-services. Until version 2.4.7-1ubuntu4.22+esm5 which was applied yesterday, it was working correctly. We can see that the content (body) of the proxied requests are removed and the "Content-length" header is set to 0. WE can see this via tcpdump. There is only one virtual host (plus the redirect http to https)
We had to roll back the change to an available earlier version (2.4.7-1ubuntu4.22 amd64) and everything is working again. This is a production server so it has also a security impact...
Please investigate.
I can provide further information if needed.
Thank you very much

[Utkarsh Gupta (utkarsh)]

[subscribing Ubuntu security team to take a look at this regression report.]

[Alex Murray (alexmurray)]

https://ubuntu.com/security/notices/USN-5487-3 was published earlier today which should resolve the regressions from USN-5487-1 - can you please update to 2.4.7-1ubuntu4.22+esm8 and verify if this fixes the issue you are seeing? Thanks.

[Paride Legovini (paride)]

Hello Tolga and thanks for this bug report. I'm marking this as Incomplete for now as it's waiting for confirmation that 2.4.7-1ubuntu4.22+esm8 actually fixes the regression.

[Tolga Özgan (ctsd-devops)]

We could not test it yet...

[Tolga Özgan (ctsd-devops)]

 Installed and tested yesterday and it works.
Bug can be closed.
Thank you

[Seth Arnold (seth-arnold)]

Thanks Tolga