enterprise-support team mailing list archive

["Jay R. Wren" <jay.wren@xxxxxxxxxxxxx>]

Public bug reported:

This effects trusty, xenial and current httpd trunk.

https://bz.apache.org/bugzilla/show_bug.cgi?id=60330

As a reverse proxy, a 100 continue response is sent prematurely when a
request contains expects: 100-continue. This causes the requesting
client to send a body. The apache httpd proxy will then read the body
and attempt to send it to the backend, but the backend already sent an
error and should be allowed to NOT read the remaining request body,
which never should have existed. When the backend does not read the
request body mod_proxy_pass errors and returns a 500 error to the
client. The client never receives the correct error message.

** Affects: apache2
     Importance: Unknown
         Status: Unknown

** Affects: apache2 (Ubuntu)
     Importance: Undecided
         Status: New

** Bug watch added: bz.apache.org/bugzilla/ #60330
   https://bz.apache.org/bugzilla/show_bug.cgi?id=60330

** Also affects: apache2 via
   https://bz.apache.org/bugzilla/show_bug.cgi?id=60330
   Importance: Unknown
       Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Server/Client Support Team, which is subscribed to apache2 in Ubuntu.
Matching subscriptions: Ubuntu Server/Client Support Team
https://bugs.launchpad.net/bugs/1641238

Title:
  as a reverse proxy, a 100 continue response is sent prematurely when a
  request contains expects: 100-continue

To manage notifications about this bug go to:
https://bugs.launchpad.net/apache2/+bug/1641238/+subscriptions