Your message dated Fri, 27 Mar 2026 15:05:44 +0000
with message-id <[email protected]>
and subject line Bug#1126960: fixed in nginx 1.28.3-2
has caused the Debian Bug report #1126960,
regarding nginx: proxy_params should use $host instead of $http_host
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1126960: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1126960
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: nginx
Severity: normal
X-Debbugs-Cc: [email protected]
Dear Maintainer,
The file proxy_params should use the variable $host instead of
$http_host for the header Host. As written in the nginx documentation :
However, if this field is not present in a client request header then
nothing will be passed. In such a case it is better to use the $host
variable - its value equals the server name in the “Host” request header
field or the primary server name if this field is not present
Currently, HTTP/3 is broken with a HTTP/1.1 backend. As there is no Host
header in HTTP/3 (the name is sent during the negociation and not as a
header), the backend is refusing the request.
Changing $http_host with $host resolves the issue, and is more
futureproof.
Thanks
-- System Information:
Debian Release: forky/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.18.5+deb14-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages nginx depends on:
ii libc6 2.42-11+b1
ii libcrypt1 1:4.5.1-1
ii libpcre2-8-0 10.46-1+b1
ii libssl3t64 3.5.5-1
pn nginx-common <none>
ii zlib1g 1:1.3.dfsg+really1.3.1-2
nginx recommends no packages.
nginx suggests no packages.
--- End Message ---
--- Begin Message ---
Source: nginx
Source-Version: 1.28.3-2
Done: Jan Mojžíš <[email protected]>
We believe that the bug you reported is fixed in the latest version of
nginx, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jan Mojžíš <[email protected]> (supplier of updated nginx package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 27 Mar 2026 14:26:06 +0000
Source: nginx
Architecture: source
Version: 1.28.3-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Nginx Maintainers
<[email protected]>
Changed-By: Jan Mojžíš <[email protected]>
Closes: 1126960
Changes:
nginx (1.28.3-2) unstable; urgency=medium
.
* Upload to unstable
* Finally close the bug #1126960 (Closes: 1126960)
.
nginx (1.28.3-1) experimental; urgency=medium
.
* New upstream version 1.28.3
* d/libnginx-mod.abisubstvars: update ABI to nginx-abi-1.28.3-1
.
nginx (1.28.2-4) experimental; urgency=medium
.
* d/libnginx-mod.abisubstvars: update ABI to nginx-abi-1.28.2-4, the previous
release (1.28.2-3) contained a backported patch that modified the ABI.
As a result, the nginx ABI version is bumped to nginx-abi-1.28.2-4.
* d/changelog: fix incorrectly closed bug in release 1.28.2-3
(112696 → 1126960)
Checksums-Sha1:
bd5fe516aae1289106a7b3c6e352dad4f4bd113b 3803 nginx_1.28.3-2.dsc
a88737f852ebe5d6b64ae0f7996188326502feab 76020 nginx_1.28.3-2.debian.tar.xz
27c8f0f252d43688a63513154322253728d7c21b 2286120 nginx_1.28.3-2.git.tar.xz
606a6b4c0ebd2c53f13d0d73e2c82ff802ecd009 17325 nginx_1.28.3-2_source.buildinfo
Checksums-Sha256:
6d706e2f26e15a3fb073b9e91adb9345147c6bd251b177cd3e466a9707f174dd 3803
nginx_1.28.3-2.dsc
df9c2fc50158e4d7c4e4c7f0132daee8078cb49ca11d84198cd791aa255c2793 76020
nginx_1.28.3-2.debian.tar.xz
f45614ed901e39691744f06df01d952c9f1595a6bef74eb7b216af3f5ca4757d 2286120
nginx_1.28.3-2.git.tar.xz
41f36ff39a1d5b29688504007715a4a60f96d45e9ff3a7bef6ed873e9e0d6996 17325
nginx_1.28.3-2_source.buildinfo
Files:
19bce7d49bccac30df22d83cba284cdc 3803 httpd optional nginx_1.28.3-2.dsc
1fd3cdb7880fac6d981169b82e6de5df 76020 httpd optional
nginx_1.28.3-2.debian.tar.xz
8c55dec05b02fbe422b8879a08699249 2286120 httpd None nginx_1.28.3-2.git.tar.xz
d6d3f682784f6f0bb5fb3bab26af1549 17325 httpd optional
nginx_1.28.3-2_source.buildinfo
Git-Tag-Info: tag=7c72310dda82318b9507bf51043e3a7c2989765b
fp=d008b0c23d8479e46b9fcb9045da517496939ff9
Git-Tag-Tagger: Jan Mojžíš <[email protected]>
-----BEGIN PGP SIGNATURE-----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=kPV6
-----END PGP SIGNATURE-----
pgpKsr5BDFw4o.pgp
Description: PGP signature
--- End Message ---
