A quick look at the source file
http://ppa.launchpad.net/nginx/stable/ubuntu/pool/main/n/nginx/nginx_1.6.0-1+trusty0.debian.tar.gz
tells me that the naxsi version is still the same and there is still as
far as can see a discrepancy between naxsi version and the learning
/white-list tools included.

I left a comment in  bug  #1168720 , I  think  the root cause for the
problem described in that bug is also due to difference between white-
list tool and version of naxsi, although in that bug it's the current
white-list tool being used to generate white-list rules for the older
version of naxsi included in the nginx-naxsi package.

An upgrade of the naxsi version included would be very desirable if
changes are made.

To my knowledge there are extensions to the naxsi config-file format
between 0.50.0 and 0.53-2 but not the same compatibility issues that
have been seen  in combination with previous version upgrades of naxsi.
Authoritative answer to this  question is best found at the naxsi
upstream, https://github.com/nbs-system/naxsi

I think this naxsi faq answer is relevant with regards to this bug-
report: https://github.com/nbs-
system/naxsi/wiki/faq#Why_do_you_keep_radically_changing_learning_tools_

I'll change the bug status to new.

Thank you for your time and effort!

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nginx in Ubuntu.
https://bugs.launchpad.net/bugs/1313224

Title:
  Outdated naxsi version, incorrect learning tools included in packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/nginx/+bug/1313224/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to