Comment 6 for bug 1313224

Revision history for this message
Ove Jobring (ovejo) wrote :

A quick look at the source file http://ppa.launchpad.net/nginx/stable/ubuntu/pool/main/n/nginx/nginx_1.6.0-1+trusty0.debian.tar.gz tells me that the naxsi version is still the same and there is still as far as can see a discrepancy between naxsi version and the learning/white-list tools included.

I left a comment in bug #1168720 , I think the root cause for the problem described in that bug is also due to difference between white-list tool and version of naxsi, although in that bug it's the current white-list tool being used to generate white-list rules for the older version of naxsi included in the nginx-naxsi package.

An upgrade of the naxsi version included would be very desirable if changes are made.

To my knowledge there are extensions to the naxsi config-file format between 0.50.0 and 0.53-2 but not the same compatibility issues that have been seen in combination with previous version upgrades of naxsi. Authoritative answer to this question is best found at the naxsi upstream, https://github.com/nbs-system/naxsi

I think this naxsi faq answer is relevant with regards to this bug-report: https://github.com/nbs-system/naxsi/wiki/faq#Why_do_you_keep_radically_changing_learning_tools_

I'll change the bug status to new.

Thank you for your time and effort!