NGINX App Protect WAF 5.3

September 25, 2024

Warning

When upgrading, you must recompile all policy and log bundles using the latest WAF compiler.

Older bundles will be detected and disallowed.

New features

Resolved issues

  • 10775 Fixed - Resolved a threshold calculation in the base64 decoding mechanism.
  • 11426 Fixed - Resolved log entry of an XFF header that contains more than one value.
  • 11272 Fixed - Resolved an issue where, in certain instances, the original HTTP response code was shown for rejected requests.
  • 11568 Fixed - Support seamless upgrades by using the latest tag instead of hardcoded versions.
  • 5302 Fixed - The enforcer leaves an incomplete job when NGINX reloads during DNS resolution.

Supported packages

Important Starting from this release, CentOS 7.4, Rhel 7.4 and Amazon Linux 2 support has been deprecated.

App Protect Module for NGINX Open Source

Alpine Linux 3.16 / Alpine Linux 3.17
  • app-protect-module-oss-1.25.5.5.144.0-r1.apk
Debian 11
  • app-protect-module-oss_1.25.5+5.144.0-1~bullseye_amd64.deb
Debian 12
  • app-protect-module-oss_1.25.5+5.144.0-1~bookworm_amd64.deb
Ubuntu 20.04
  • app-protect-module-oss_1.25.5+5.144.0-1~focal_amd64.deb
Ubuntu 22.04
  • app-protect-module-oss_1.25.5+5.144.0-1~jammy_amd64.deb
Ubuntu 24.04
  • app-protect-module-oss_1.25.5+5.144.0-1~noble_amd64.deb
RHEL 8.1+ / Oracle Linux 8.1+
  • app-protect-module-oss-1.25.5+5.144.0-1.el8.ngx.x86_64.rpm
RHEL 9+
  • app-protect-module-oss-1.25.5+5.144.0-1.el9.ngx.x86_64.rpm

App Protect Module for NGINX Plus

Alpine Linux 3.16 / Alpine Linux 3.17
  • app-protect-module-plus-32.5.144.0-r1.apk
Debian 11
  • app-protect-module-plus_32+5.144.0-1~bullseye_amd64.deb
Debian 12
  • app-protect-module-plus_32+5.144.0-1~bookworm_amd64.deb
Ubuntu 20.04
  • app-protect-module-plus_32+5.144.0-1~focal_amd64.deb
Ubuntu 22.04
  • app-protect-module-plus_32+5.144.0-1~jammy_amd64.deb
Ubuntu 24.04
  • app-protect-module-plus_32+5.144.0-1~noble_amd64.deb
RHEL 8.1+ / Oracle Linux 8.1+
  • app-protect-module-plus-32+5.144.0-1.el8.ngx.x86_64.rpm
RHEL 9+
  • app-protect-module-plus-32+5.144.0-1.el9.ngx.x86_64.rpm