NGINX App Protect WAF 4.14

March 18th, 2025

---

New features

• NGINX App Protect WAF Enforcer now supports multiple signature versions
• Changed the maximum memory of the XML processing engine to 8GB
• Upgraded the Go compiler to 1.23.7

---

Known issues

• “Violation Encoding” is not enabled by default
• “Violation Bad Unescape” is not enabled by default

---

Important notes

• Alpine 3.17 is no longer supported

---

Supported packages

Distribution name	Package file
Alpine 3.19	app-protect-33.####.0-r1.apk
Debian 11	app-protect_33+####.0-1~bullseye_amd64.deb
Debian 12	app-protect_33+####.0-1~bookworm_amd64.deb
Ubuntu 20.04	app-protect_33+####.0-1~focal_amd64.deb
Ubuntu 22.04	app-protect_33+####.0-1~jammy_amd64.deb
Ubuntu 24.04	app-protect_33+####.0-1~noble_amd64.deb
Amazon Linux 2023	app-protect-33+####.0-1.amzn2023.ngx.x86_64.rpm
RHEL 8 and Rocky Linux 8	app-protect-33+####.0-1.el8.ngx.x86_64.rpm
RHEL 9	app-protect-33+####.0-1.el9.ngx.x86_64.rpm
Oracle Linux 8.1	app-protect-33+####.0-1.el8.ngx.x86_64.rpm

---

---