NGINX App Protect WAF 5.3

September 25, 2024

Warning

When upgrading, you must recompile all policy and log bundles using the latest WAF compiler.

Older bundles will be detected and disallowed.



  • 10775 Fixed - Resolved a threshold calculation in the base64 decoding mechanism.
  • 11426 Fixed - Resolved log entry of an XFF header that contains more than one value.
  • 11272 Fixed - Resolved an issue where, in certain instances, the original HTTP response code was shown for rejected requests.
  • 11568 Fixed - Support seamless upgrades by using the latest tag instead of hardcoded versions.
  • 5302 Fixed - The enforcer leaves an incomplete job when NGINX reloads during DNS resolution.

Important
Starting from this release, CentOS 7.4, Rhel 7.4 and Amazon Linux 2 support has been deprecated.

  • app-protect-module-oss-1.25.5.5.144.0-r1.apk
  • app-protect-module-oss_1.25.5+5.144.0-1~bullseye_amd64.deb
  • app-protect-module-oss_1.25.5+5.144.0-1~bookworm_amd64.deb
  • app-protect-module-oss_1.25.5+5.144.0-1~focal_amd64.deb
  • app-protect-module-oss_1.25.5+5.144.0-1~jammy_amd64.deb
  • app-protect-module-oss_1.25.5+5.144.0-1~noble_amd64.deb
  • app-protect-module-oss-1.25.5+5.144.0-1.el8.ngx.x86_64.rpm
  • app-protect-module-oss-1.25.5+5.144.0-1.el9.ngx.x86_64.rpm

  • app-protect-module-plus-32.5.144.0-r1.apk
  • app-protect-module-plus_32+5.144.0-1~bullseye_amd64.deb
  • app-protect-module-plus_32+5.144.0-1~bookworm_amd64.deb
  • app-protect-module-plus_32+5.144.0-1~focal_amd64.deb
  • app-protect-module-plus_32+5.144.0-1~jammy_amd64.deb
  • app-protect-module-plus_32+5.144.0-1~noble_amd64.deb
  • app-protect-module-plus-32+5.144.0-1.el8.ngx.x86_64.rpm
  • app-protect-module-plus-32+5.144.0-1.el9.ngx.x86_64.rpm