From 2a8cca9c2f5041a5954d7d3a7f2e823203ffe59b Mon Sep 17 00:00:00 2001 From: Ohad Perets Date: Sun, 3 May 2026 12:53:18 +0000 Subject: [PATCH 1/8] adding 5.13.0 RN --- content/waf/changelog/_index.md | 37 +++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) diff --git a/content/waf/changelog/_index.md b/content/waf/changelog/_index.md index af43b904f..ec052d471 100644 --- a/content/waf/changelog/_index.md +++ b/content/waf/changelog/_index.md @@ -11,6 +11,43 @@ This changelog lists all of the information for F5 WAF for NGINX releases in 202 For older releases, check the changelogs for previous years: [2025]({{< ref "/waf/changelog/2025.md" >}}), [2024]({{< ref "/waf/changelog/2024.md" >}}), [2023]({{< ref "/waf/changelog/2023.md" >}}). +## F5 WAF for NGINX 5.13 + +Released _May_ 13th, 2026_. + +### New features + +- Added support for Debian 13 +- Added support for NGINX Plus R37 +- Upgrade PCRE with PCRE2 + +### Resolved issues + +- 14197 - Upgrade Go compiler to 1.26.2 +- 14043 - wrong value in total memory used under bd-socket-plugin +- 14078 - Remove Mojolicious test files from the product +- 14147 - fix recompilation race condition +- 14002 - bd_cfg_manifest consumed with a corrupted record length header + +### Packages + +{{< table >}} + +| Distribution name | NGINX Open Source (5.13) | NGINX Plus (5.13) | NGINX Plus (5.13) | +| ------------------------ | ----------------------------------------------------------------- | ---------------------------------------------------------------- | ---------------------------------------------------- | +| Alpine 3.22 | _app-protect-module-oss-1.29.8.5.629.0-r1.apk_ | _app-protect-module-plus-37.0.5.629.0-r1.apk_ | _app-protect-37.0.5.629.0-r1.apk_ | +| Amazon Linux 2023 | _app-protect-module-oss-1.29.8+5.629.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.629.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-37.0+5.629.0-1.amzn2023.ngx.x86_64.rpm_ | +| Debian 11 | _app-protect-module-oss_1.29.8+5.629.0-1\~bullseye_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~bullseye_amd64.deb_ | _app-protect_37.0+5.629.0-1\~bullseye_amd64.deb_ | +| Debian 12 | _app-protect-module-oss_1.29.8+5.629.0-1\~bookworm_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~bookworm_amd64.deb_ | _app-protect_37.0+5.629.0-1\~bookworm_amd64.deb_ | +| Debian 13 | _app-protect-module-oss_1.29.8+5.629.0-1\~bookworm_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~bookworm_amd64.deb_ | _app-protect_37.0+5.629.0-1\~trixie_amd64.deb_ | +| Ubuntu 22.04 | _app-protect-module-oss_1.29.8+5.629.0-1\~jammy_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~jammy_amd64.deb_ | _app-protect_37.0+5.629.0-1\~jammy_amd64.deb_ | +| Ubuntu 24.04 | _app-protect-module-oss_1.29.8+5.629.0-1\~noble_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~noble_amd64.deb_ | _app-protect_37.0+5.629.0-1\~noble_amd64.deb_ | +| Oracle Linux 8 | _app-protect-module-oss-1.29.8+5.629.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.629.0-1.el8.ngx.x86_64.rpm_ | _app-protect-37.0+5.629.0-1.el8.ngx.x86_64.rpm_ | +| RHEL 8 and Rocky Linux 8 | _app-protect-module-oss-1.29.8+5.629.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.629.0-1.el8.ngx.x86_64.rpm_ | _app-protect-37.0+5.629.0-1.el8.ngx.x86_64.rpm_ | +| RHEL 9 and Rocky Linux 9 | _app-protect-module-oss-1.29.8+5.629.0-1.el9.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.629.0-1.el9.ngx.x86_64.rpm_ | _app-protect-37.0+5.629.0-1.el9.ngx.x86_64.rpm_ | +| RHEL 10 | _app-protect-module-oss-1.29.8+5.629.0-1.el10.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.629.0-1.el10.ngx.x86_64.rpm_ | _app-protect-37.0+5.629.0-1.el10.ngx.x86_64.rpm_ | + +{{< /table >}} ## F5 WAF for NGINX 5.12.1 From 7068889e72b971fc865089d2e3e50bf27ea607aa Mon Sep 17 00:00:00 2001 From: ohad-perets <126083286+ohad-perets@users.noreply.github.com> Date: Sun, 3 May 2026 19:02:15 +0300 Subject: [PATCH 2/8] Apply suggestions from code review Co-authored-by: liadlevif5 <118743780+liadlevif5@users.noreply.github.com> --- content/waf/changelog/_index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/waf/changelog/_index.md b/content/waf/changelog/_index.md index ec052d471..27b1a857d 100644 --- a/content/waf/changelog/_index.md +++ b/content/waf/changelog/_index.md @@ -18,7 +18,7 @@ Released _May_ 13th, 2026_. ### New features - Added support for Debian 13 -- Added support for NGINX Plus R37 +- Added support for NGINX Plus R37.0 - Upgrade PCRE with PCRE2 ### Resolved issues @@ -39,7 +39,7 @@ Released _May_ 13th, 2026_. | Amazon Linux 2023 | _app-protect-module-oss-1.29.8+5.629.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.629.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-37.0+5.629.0-1.amzn2023.ngx.x86_64.rpm_ | | Debian 11 | _app-protect-module-oss_1.29.8+5.629.0-1\~bullseye_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~bullseye_amd64.deb_ | _app-protect_37.0+5.629.0-1\~bullseye_amd64.deb_ | | Debian 12 | _app-protect-module-oss_1.29.8+5.629.0-1\~bookworm_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~bookworm_amd64.deb_ | _app-protect_37.0+5.629.0-1\~bookworm_amd64.deb_ | -| Debian 13 | _app-protect-module-oss_1.29.8+5.629.0-1\~bookworm_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~bookworm_amd64.deb_ | _app-protect_37.0+5.629.0-1\~trixie_amd64.deb_ | +| Debian 13 | _app-protect-module-oss_1.29.8+5.629.0-1\~trixie_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~trixie_amd64.deb_ | _app-protect_37.0+5.629.0-1\~trixie_amd64.deb_ | | Ubuntu 22.04 | _app-protect-module-oss_1.29.8+5.629.0-1\~jammy_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~jammy_amd64.deb_ | _app-protect_37.0+5.629.0-1\~jammy_amd64.deb_ | | Ubuntu 24.04 | _app-protect-module-oss_1.29.8+5.629.0-1\~noble_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~noble_amd64.deb_ | _app-protect_37.0+5.629.0-1\~noble_amd64.deb_ | | Oracle Linux 8 | _app-protect-module-oss-1.29.8+5.629.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.629.0-1.el8.ngx.x86_64.rpm_ | _app-protect-37.0+5.629.0-1.el8.ngx.x86_64.rpm_ | From 11281f116256e28796911e118f9cabf2ff7d4b79 Mon Sep 17 00:00:00 2001 From: ohad-perets <126083286+ohad-perets@users.noreply.github.com> Date: Sun, 3 May 2026 19:02:49 +0300 Subject: [PATCH 3/8] Update changelog with new features and resolved issues remove PRCE comment --- content/waf/changelog/_index.md | 1 - 1 file changed, 1 deletion(-) diff --git a/content/waf/changelog/_index.md b/content/waf/changelog/_index.md index 27b1a857d..f54c2c584 100644 --- a/content/waf/changelog/_index.md +++ b/content/waf/changelog/_index.md @@ -19,7 +19,6 @@ Released _May_ 13th, 2026_. - Added support for Debian 13 - Added support for NGINX Plus R37.0 -- Upgrade PCRE with PCRE2 ### Resolved issues From 107828bd40ef3af2dc9480c960971f3935909277 Mon Sep 17 00:00:00 2001 From: ohad-perets <126083286+ohad-perets@users.noreply.github.com> Date: Wed, 6 May 2026 10:34:57 +0300 Subject: [PATCH 4/8] Fix typos in resolved issues section --- content/waf/changelog/_index.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/content/waf/changelog/_index.md b/content/waf/changelog/_index.md index cc524304f..80b707b47 100644 --- a/content/waf/changelog/_index.md +++ b/content/waf/changelog/_index.md @@ -23,10 +23,10 @@ Released _May_ 13th, 2026_. ### Resolved issues - 14197 - Upgrade Go compiler to 1.26.2 -- 14043 - wrong value in total memory used under bd-socket-plugin +- 14043 - Wrong value in total memory used under bd-socket-plugin - 14078 - Remove Mojolicious test files from the product -- 14147 - fix recompilation race condition -- 14002 - bd_cfg_manifest consumed with a corrupted record length header +- 14147 - Fix recompilation race condition +- 14002 - The bd_cfg_manifest consumed with a corrupted record length header ### Packages From 59f67bba5db730787157bbe400b5ceeaa19a41c5 Mon Sep 17 00:00:00 2001 From: ohad-perets <126083286+ohad-perets@users.noreply.github.com> Date: Thu, 14 May 2026 11:18:15 +0300 Subject: [PATCH 5/8] Update app-protect module versions in changelog --- content/waf/changelog/_index.md | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/content/waf/changelog/_index.md b/content/waf/changelog/_index.md index 80b707b47..909b1c4c2 100644 --- a/content/waf/changelog/_index.md +++ b/content/waf/changelog/_index.md @@ -34,17 +34,17 @@ Released _May_ 13th, 2026_. | Distribution name | NGINX Open Source (5.13) | NGINX Plus (5.13) | NGINX Plus (5.13) | | ------------------------ | ----------------------------------------------------------------- | ---------------------------------------------------------------- | ---------------------------------------------------- | -| Alpine 3.22 | _app-protect-module-oss-1.29.8.5.629.0-r1.apk_ | _app-protect-module-plus-37.0.5.629.0-r1.apk_ | _app-protect-37.0.5.629.0-r1.apk_ | -| Amazon Linux 2023 | _app-protect-module-oss-1.29.8+5.629.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.629.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-37.0+5.629.0-1.amzn2023.ngx.x86_64.rpm_ | -| Debian 11 | _app-protect-module-oss_1.29.8+5.629.0-1\~bullseye_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~bullseye_amd64.deb_ | _app-protect_37.0+5.629.0-1\~bullseye_amd64.deb_ | -| Debian 12 | _app-protect-module-oss_1.29.8+5.629.0-1\~bookworm_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~bookworm_amd64.deb_ | _app-protect_37.0+5.629.0-1\~bookworm_amd64.deb_ | -| Debian 13 | _app-protect-module-oss_1.29.8+5.629.0-1\~trixie_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~trixie_amd64.deb_ | _app-protect_37.0+5.629.0-1\~trixie_amd64.deb_ | -| Ubuntu 22.04 | _app-protect-module-oss_1.29.8+5.629.0-1\~jammy_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~jammy_amd64.deb_ | _app-protect_37.0+5.629.0-1\~jammy_amd64.deb_ | -| Ubuntu 24.04 | _app-protect-module-oss_1.29.8+5.629.0-1\~noble_amd64.deb_ | _app-protect-module-plus_37.0+5.629.0-1\~noble_amd64.deb_ | _app-protect_37.0+5.629.0-1\~noble_amd64.deb_ | -| Oracle Linux 8 | _app-protect-module-oss-1.29.8+5.629.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.629.0-1.el8.ngx.x86_64.rpm_ | _app-protect-37.0+5.629.0-1.el8.ngx.x86_64.rpm_ | -| RHEL 8 and Rocky Linux 8 | _app-protect-module-oss-1.29.8+5.629.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.629.0-1.el8.ngx.x86_64.rpm_ | _app-protect-37.0+5.629.0-1.el8.ngx.x86_64.rpm_ | -| RHEL 9 and Rocky Linux 9 | _app-protect-module-oss-1.29.8+5.629.0-1.el9.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.629.0-1.el9.ngx.x86_64.rpm_ | _app-protect-37.0+5.629.0-1.el9.ngx.x86_64.rpm_ | -| RHEL 10 | _app-protect-module-oss-1.29.8+5.629.0-1.el10.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.629.0-1.el10.ngx.x86_64.rpm_ | _app-protect-37.0+5.629.0-1.el10.ngx.x86_64.rpm_ | +| Alpine 3.22 | _app-protect-module-oss-1.29.8.5.635.0-r1.apk_ | _app-protect-module-plus-37.0.5.635.0-r1.apk_ | _app-protect-37.0.5.635.0-r1.apk_ | +| Amazon Linux 2023 | _app-protect-module-oss-1.29.8+5.635.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.635.0-1.amzn2023.ngx.x86_64.rpm_ | _app-protect-37.0+5.635.0-1.amzn2023.ngx.x86_64.rpm_ | +| Debian 11 | _app-protect-module-oss_1.29.8+5.635.0-1\~bullseye_amd64.deb_ | _app-protect-module-plus_37.0+5.635.0-1\~bullseye_amd64.deb_ | _app-protect_37.0+5.635.0-1\~bullseye_amd64.deb_ | +| Debian 12 | _app-protect-module-oss_1.29.8+5.635.0-1\~bookworm_amd64.deb_ | _app-protect-module-plus_37.0+5.635.0-1\~bookworm_amd64.deb_ | _app-protect_37.0+5.635.0-1\~bookworm_amd64.deb_ | +| Debian 13 | _app-protect-module-oss_1.29.8+5.635.0-1\~trixie_amd64.deb_ | _app-protect-module-plus_37.0+5.635.0-1\~trixie_amd64.deb_ | _app-protect_37.0+5.635.0-1\~trixie_amd64.deb_ | +| Ubuntu 22.04 | _app-protect-module-oss_1.29.8+5.635.0-1\~jammy_amd64.deb_ | _app-protect-module-plus_37.0+5.635.0-1\~jammy_amd64.deb_ | _app-protect_37.0+5.635.0-1\~jammy_amd64.deb_ | +| Ubuntu 24.04 | _app-protect-module-oss_1.29.8+5.635.0-1\~noble_amd64.deb_ | _app-protect-module-plus_37.0+5.635.0-1\~noble_amd64.deb_ | _app-protect_37.0+5.635.0-1\~noble_amd64.deb_ | +| Oracle Linux 8 | _app-protect-module-oss-1.29.8+5.635.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.635.0-1.el8.ngx.x86_64.rpm_ | _app-protect-37.0+5.635.0-1.el8.ngx.x86_64.rpm_ | +| RHEL 8 and Rocky Linux 8 | _app-protect-module-oss-1.29.8+5.635.0-1.el8.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.635.0-1.el8.ngx.x86_64.rpm_ | _app-protect-37.0+5.635.0-1.el8.ngx.x86_64.rpm_ | +| RHEL 9 and Rocky Linux 9 | _app-protect-module-oss-1.29.8+5.635.0-1.el9.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.635.0-1.el9.ngx.x86_64.rpm_ | _app-protect-37.0+5.635.0-1.el9.ngx.x86_64.rpm_ | +| RHEL 10 | _app-protect-module-oss-1.29.8+5.635.0-1.el10.ngx.x86_64.rpm_ | _app-protect-module-plus-37.0+5.635.0-1.el10.ngx.x86_64.rpm_ | _app-protect-37.0+5.635.0-1.el10.ngx.x86_64.rpm_ | {{< /table >}} From ec7e8a4b169ee80ed655ba74d47b9565f71d6a7b Mon Sep 17 00:00:00 2001 From: ohad-perets <126083286+ohad-perets@users.noreply.github.com> Date: Thu, 14 May 2026 12:24:37 +0300 Subject: [PATCH 6/8] Update release date for F5 WAF for NGINX 5.13 --- content/waf/changelog/_index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/waf/changelog/_index.md b/content/waf/changelog/_index.md index 909b1c4c2..320cec112 100644 --- a/content/waf/changelog/_index.md +++ b/content/waf/changelog/_index.md @@ -13,7 +13,7 @@ For older releases, check the changelogs for previous years: [2025]({{< ref "/wa ## F5 WAF for NGINX 5.13 -Released _May_ 13th, 2026_. +Released _May 14th, 2026_. ### New features From d7be7c6ad3774d7a39c3a4e2780f22894f4a7bba Mon Sep 17 00:00:00 2001 From: ohad-perets <126083286+ohad-perets@users.noreply.github.com> Date: Thu, 14 May 2026 12:31:15 +0300 Subject: [PATCH 7/8] Update _index.md moving the _ to the correct place From afb1e4462d4a7371d7ef18c93fcbd17d78c097b0 Mon Sep 17 00:00:00 2001 From: ohad-perets <126083286+ohad-perets@users.noreply.github.com> Date: Thu, 14 May 2026 12:54:22 +0300 Subject: [PATCH 8/8] Fix formatting of changelog entry for Mojolicious files --- content/waf/changelog/_index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/waf/changelog/_index.md b/content/waf/changelog/_index.md index 320cec112..a0b40c4c2 100644 --- a/content/waf/changelog/_index.md +++ b/content/waf/changelog/_index.md @@ -24,7 +24,7 @@ Released _May 14th, 2026_. - 14197 - Upgrade Go compiler to 1.26.2 - 14043 - Wrong value in total memory used under bd-socket-plugin -- 14078 - Remove Mojolicious test files from the product +- 14078 - Remove Mojolicious test files from the product - 14147 - Fix recompilation race condition - 14002 - The bd_cfg_manifest consumed with a corrupted record length header