Changelog
Information architecture note
The design intention for this page is to act as a single reference point for changes between each release. “Changelog” is the term being adopted across the entire NGINX product ecosystem.
Since both versions of NGINX App Protect WAF are released at the same time, they can be stored in the same note. Change items for only one specific version are explicitly annotated when necessary.
Updating the content of this page will likely be automated in the future, following some procedural changes to how tickets are managed within JIRA.
This changelog lists all of the information for F5 NGINX App Protect WAF releases in 2025.
For older releases, check the changelogs for previous years: 2024 , 2023 .
Added support for Rocky Linux 9
Added support for IP Intelligence
Added support for Override rules for IP Address Lists
Ubuntu 20.04 is no longer supported
(12447) Upgrade libk5crypto3 package
(12520) Upgrade Go compiler to 1.23.8
(12527) Remove CPAN - installed certs and source files
(11112) Remove systemd/init.d leftovers in NAP WAF v5 pkgs
(12400) Cookie attributes are not added to a TS cookie when there is more than one TS cookie
(12498) Undefined behavior when using huge XFF
(12731) Multiple clean_resp_reset internal error messages in logs when loading NAP
Distribution name
Package file
Alpine 3.19
app-protect-module-oss-1.27.4+5.442.0-r1.apk
Amazon Linux 2023
app-protect-module-oss-1.27.4+5.442.0-1.amzn2023.ngx.x86_64.rpm
Debian 11
app-protect-module-oss_1.27.4+5.442.0-1~bullseye_amd64.deb
Debian 12
app-protect-module-oss_1.27.4+5.442.0-1~bookworm_amd64.deb
Oracle Linux 8.1
app-protect-module-oss-1.27.4+5.442.0-1.el8.ngx.x86_64.rpm
Ubuntu 22.04
app-protect-module-oss_1.27.4+5.442.0-1~jammy_amd64.deb
Ubuntu 24.04
app-protect-module-oss_1.27.4+5.442.0-1~noble_amd64.deb
RHEL 8 and Rocky Linux 8
app-protect-module-oss-1.27.4+5.442.0-1.el8.ngx.x86_64.rpm
RHEL 9 and Rocky Linux 9
app-protect-module-oss-1.27.4+5.442.0-1.el9.ngx.x86_64.rpm
Distribution name
Package file
Alpine 3.19
app-protect-module-plus-34+5.442.0-r1.apk
Amazon Linux 2023
app-protect-module-plus-34+5.442.0-1.amzn2023.ngx.x86_64.rpm
Debian 11
app-protect-module-plus_34+5.442.0-1~bullseye_amd64.deb
Debian 12
app-protect-module-plus_34+5.442.0-1~bookworm_amd64.deb
Oracle Linux 8.1
app-protect-module-plus-34+5.442.0-1.el8.ngx.x86_64.rpm
Ubuntu 22.04
app-protect-module-plus_34+5.442.0-1~jammy_amd64.deb
Ubuntu 24.04
app-protect-module-plus_34+5.442.0-1~noble_amd64.deb
RHEL 8 and Rocky Linux 8
app-protect-module-plus-34+5.442.0-1.el8.ngx.x86_64.rpm
RHEL 9 and Rocky Linux 9
app-protect-module-plus-34+5.442.0-1.el9.ngx.x86_64.rpm
Distribution name
Package file
Alpine 3.19
app-protect-34.5.442.0-r1.apk
Amazon Linux 2023
app-protect-34+5.442.0-1.amzn2023.ngx.x86_64.rpm
Debian 11
app-protect_34+5.442.0-1~bullseye_amd64.deb
Debian 12
app-protect_34+5.442.0-1~bookworm_amd64.deb
Oracle Linux 8.1
app-protect-34+5.442.0-1.el8.ngx.x86_64.rpm
Ubuntu 22.04
app-protect_34+5.442.0-1~jammy_amd64.deb
Ubuntu 24.04
app-protect_34+5.442.0-1~noble_amd64.deb
RHEL 8 and Rocky Linux 8
app-protect-34+5.442.0-1.el8.ngx.x86_64.rpm
RHEL 9 and Rocky Linux 9
app-protect-34+5.442.0-1.el9.ngx.x86_64.rpm
Alpine 3.17 is no longer supported
Upgraded the Go compiler to 1.23.7
(12140) Changed the maximum memory of the XML processing engine to 8GB
(12254) A modified YAML file referenced by a JSON policy file causes a reload error when running nginx -t
(12296) “Violation Bad Unescape” is not enabled by default
(12297) “Violation Encoding” is not enabled by default
Distribution name
Package file
Alpine 3.19
app-protect-module-oss-1.27.4+5.342.0-r1.apk
Amazon Linux 2023
app-protect-module-oss-1.27.4+5.342.0-1.amzn2023.ngx.x86_64.rpm
Debian 11
app-protect-module-oss_1.27.4+5.342.0-1~bullseye_amd64.deb
Debian 12
app-protect-module-oss_1.27.4+5.342.0-1~bookworm_amd64.deb
Oracle Linux 8.1
app-protect-module-oss-1.27.4+5.342.0-1.el8.ngx.x86_64.rpm
Ubuntu 20.04
app-protect-module-oss_1.27.4+5.342.0-1~focal_amd64.deb
Ubuntu 22.04
app-protect-module-oss_1.27.4+5.342.0-1~jammy_amd64.deb
Ubuntu 24.04
app-protect-module-oss_1.27.4+5.342.0-1~noble_amd64.deb
RHEL 8 and Rocky Linux 8
app-protect-module-oss-1.27.4+5.342.0-1.el8.ngx.x86_64.rpm
RHEL 9
app-protect-module-oss-1.27.4+5.342.0-1.el9.ngx.x86_64.rpm
Distribution name
Package file
Alpine 3.19
app-protect-module-plus-34+5.342.0-r1.apk
Amazon Linux 2023
app-protect-module-plus-34+5.342.0-1.amzn2023.ngx.x86_64.rpm
Debian 11
app-protect-module-plus_34+5.342.0-1~bullseye_amd64.deb
Debian 12
app-protect-module-plus_34+5.342.0-1~bookworm_amd64.deb
Oracle Linux 8.1
app-protect-module-plus-34+5.342.0-1.el8.ngx.x86_64.rpm
Ubuntu 20.04
app-protect-module-plus_34+5.342.0-1~focal_amd64.deb
Ubuntu 22.04
app-protect-module-plus_34+5.342.0-1~jammy_amd64.deb
Ubuntu 24.04
app-protect-module-plus_34+5.342.0-1~noble_amd64.deb
RHEL 8 and Rocky Linux 8
app-protect-module-plus-34+5.342.0-1.el8.ngx.x86_64.rpm
RHEL 9
app-protect-module-plus-34+5.342.0-1.el9.ngx.x86_64.rpm
Distribution name
Package file
Alpine 3.19
app-protect-34.5.342.0-r1.apk
Amazon Linux 2023
app-protect-34+5.342.0-1.amzn2023.ngx.x86_64.rpm
Debian 11
app-protect_34+5.342.0-1~bullseye_amd64.deb
Debian 12
app-protect_34+5.342.0-1~bookworm_amd64.deb
Oracle Linux 8.1
app-protect-34+5.342.0-1.el8.ngx.x86_64.rpm
Ubuntu 20.04
app-protect_34+5.342.0-1~focal_amd64.deb
Ubuntu 22.04
app-protect_34+5.342.0-1~jammy_amd64.deb
Ubuntu 24.04
app-protect_34+5.342.0-1~noble_amd64.deb
RHEL 8 and Rocky Linux 8
app-protect-34+5.342.0-1.el8.ngx.x86_64.rpm
RHEL 9
app-protect-34+5.342.0-1.el9.ngx.x86_64.rpm
