Back in April, I upstreamed (that is, reported a bug to Debian) regarding the `nginx-naxsi` packages. The initial bug I upstreamed was about the outdated naxsi version in the naxsi packages. (see this bug in Ubuntu and the related bug in Debian)
The last update on the Debian bug is on September 10, 2014. That update says the following, and was made by Christos Trochalakis:
After discussing it with the fellow maintainers we have decided that it is
better to remove the nginx-naxsi package before jessie is freezed.
Packaging naxsi is not trivial and, unfortunately, none of the maintainers uses
it. That’s the reason nginx-naxsi is not in a good shape and we are not feeling
comfortable to release and support it.
We are sorry for any inconvenience caused.
I asked what the expected timeline was for the packages being dropped. In a response from Christos today, September 15, 2014, it was said:
It ‘ll get merged and released (1.6.1-3) by the end of the month.
Update (December 9, 2014): In Ubuntu, these changes will not make it into 14.10, but are now included in 15.04 as part of nginx 1.6.2-4ubuntu1. As such, the naxsi variant of nginx is no longer included starting with 15.04. Community support for the naxsi variant is also limited as well.
In the PPAs, the naxsi packages will be dropped with stable 1.6.2-2+precise0 +trusty0 +utopic0 and mainline 1.7.5-2+precise0 +trusty0 +utopic0.
In Debian, these changes have been applied as 1.6.2-2.
(Originally published on September 26, 2014 @ 12:34)