diff -Nru zeroinstall-injector-2.12.3/debian/changelog zeroinstall-injector-2.12.3/debian/changelog
--- zeroinstall-injector-2.12.3/debian/changelog	2017-11-19 15:55:15.000000000 +0000
+++ zeroinstall-injector-2.12.3/debian/changelog	2019-04-24 12:05:04.000000000 +0100
@@ -1,3 +1,9 @@
+zeroinstall-injector (2.12.3-2) unstable; urgency=high
+
+  * Backport fix for case-sensitive HTTP header check. Closes: #927873.
+
+ -- Thomas Leonard <talex5@gmail.com>  Wed, 24 Apr 2019 11:05:04 +0000
+
 zeroinstall-injector (2.12.3-1) unstable; urgency=medium
 
   * New upstream release.
diff -Nru zeroinstall-injector-2.12.3/debian/patches/fix-location-header.patch zeroinstall-injector-2.12.3/debian/patches/fix-location-header.patch
--- zeroinstall-injector-2.12.3/debian/patches/fix-location-header.patch	1970-01-01 01:00:00.000000000 +0100
+++ zeroinstall-injector-2.12.3/debian/patches/fix-location-header.patch	2019-04-24 12:05:04.000000000 +0100
@@ -0,0 +1,14 @@
+Fix check for HTTP Location header
+diff --git a/ocaml/zeroinstall/downloader.ml b/ocaml/zeroinstall/downloader.ml
+index 6eb7998c..f00d907b 100644
+--- a/ocaml/zeroinstall/downloader.ml
++++ b/ocaml/zeroinstall/downloader.ml
+@@ -46,7 +46,7 @@ let download_no_follow ~cancelled ?size ?modification_time ?(start_offset=Int64.
+   Lwt.catch (fun () ->
+     let redirect = ref None in
+     let check_header header =
+-      if U.starts_with header "Location:" then (
++      if U.starts_with (String.lowercase_ascii header) "location:" then (
+         redirect := Some (U.string_tail header 9 |> String.trim)
+       );
+       String.length header in
diff -Nru zeroinstall-injector-2.12.3/debian/patches/series zeroinstall-injector-2.12.3/debian/patches/series
--- zeroinstall-injector-2.12.3/debian/patches/series	1970-01-01 01:00:00.000000000 +0100
+++ zeroinstall-injector-2.12.3/debian/patches/series	2019-04-24 12:05:04.000000000 +0100
@@ -0,0 +1 @@
+fix-location-header.patch