[From nobody Fri Sep 18 06:13:08 2026
Received: (at submit) by bugs.debian.org; 12 Sep 2026 17:26:50 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-18.9 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_PACKAGE,FOURLA,FREEMAIL_FROM,HAS_PACKAGE,NO_RELAYS,
 XMAILER_REPORTBUG autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 35; hammy, 150; neutral, 137; spammy,
 0. spammytokens: hammytokens:0.000-+--XDebbugsCc,
 0.000-+--X-Debbugs-Cc, 0.000-+--H*Ad:N*Bug, 0.000-+--HTo:N*Debian,
 0.000-+--HTo:N*System
Return-path: <camden.narzt@hotmail.com>
Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96)
 (envelope-from <camden.narzt@hotmail.com>) id 1x5RV3-00BPPt-0B
 for submit@bugs.debian.org; Sat, 12 Sep 2026 17:26:49 +0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Camden Narzt <camden.narzt@hotmail.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: nginx-dev: Missing header file in nginx-dev after backport
Message-ID: <178923400788.6261.11712966740034610822.reportbug@32f200cf7597>
X-Mailer: reportbug 13.2.0
Date: Sat, 12 Sep 2026 17:26:47 +0000
Delivered-To: submit@bugs.debian.org

Package: nginx-dev
Version: 1.26.3-3+deb13u8
Severity: important
X-Debbugs-Cc: camden.narzt@hotmail.com, team@security.debian.org

Dear Maintainer,

   * What led up to the situation?

Debian backported a fix for CVE-2026-42533 and released 1.26.3-3+deb13u8.

   * What exactly did you do (or not do) that was effective (or ineffective)?

I tried to build my nginx-dynamic-module package against the new nginx-dev package version.

   * What was the outcome of this action?

Make throws the error: make[2]: *** No rule to make target 'src/http/ngx_http_script.hh', needed by 'objs/addon/nginx_module/ngx_http_passenger_module.o'. Stop.

   * What outcome did you expect instead?

Make succeeds.


   * Investigation
# on debian 13:
apt update && apt install -y nginx-dev
# snipped output from apt
dpkg -L nginx-dev | grep -F 'ngx_http_script.hh'
find /usr/share/nginx/src -name 'ngx_http_script.hh' -o -name 'ngx_stream_script.hh'
ls -l /usr/share/nginx/src/src/http/ngx_http_script.hh
 ls: cannot access '/usr/share/nginx/src/src/http/ngx_http_script.hh': No such file or directory


auto/modules was patched to include src/http/ngx_http_script.hh and that file is added to the source tree: https://mail-archive.com/debian-bugs-dist%40lists.debian.org/msg2120411.html?utm_source=chatgpt.com

but that file isn't present in the nginx-dev package.




-- System Information:
Debian Release: 13.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: arm64 (aarch64)

Kernel: Linux 6.8.0-117-generic (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect

Versions of packages nginx-dev depends on:
ii  debhelper [debhelper-compat]  13.24.2
ii  libexpat1-dev [libexpat-dev]  2.8.3-1~deb13u1
ii  libgd-dev                     2.3.3-14~deb13u1
ii  libgeoip-dev                  1.6.12-11.2~deb13u1
ii  libpcre2-dev                  10.46-1~deb13u2
ii  libperl-dev                   5.40.1-6+deb13u1
ii  libssl-dev                    3.5.7-1~deb13u2
ii  libxslt1-dev                  1.1.35-1.2+deb13u3
ii  nginx [nginx-abi-1.26.3-1]    1.26.3-3+deb13u8
ii  po-debconf                    1.0.21+nmu1
ii  zlib1g-dev                    1:1.3.dfsg+really1.3.1-1+b1

nginx-dev recommends no packages.

nginx-dev suggests no packages.

-- no debconf information
]