From db80134266566f6c7f3e0b3433c97bfda8e655e6 Mon Sep 17 00:00:00 2001 From: Roman Azarenko Date: Wed, 13 Aug 2025 13:28:33 +0200 Subject: [PATCH] nginx: update CPE ID Looking at the official CPE dictionary [1], `cpe:/a:nginx:nginx` was only used until 1.21.4 inclusively. Later it was renamed to `cpe:/a:f5:nginx`, and it showed up in a few more non-contiguous versions numbers after 1.21.4. In all nginx security advisories [2] starting from year 2024, the CPE ID used is `cpe:/a:f5:nginx_open_source`. This includes versions 1.25.0 and newer. Update the CPE ID to the newest known value of `cpe:/a:f5:nginx_open_source` used in nginx's own security advirosies/CVEs. [1]: https://nvd.nist.gov/products/cpe [2]: https://nginx.org/en/security_advisories.html Signed-off-by: Roman Azarenko (cherry picked from commit 973a26fc6308816de542b5a55a590868b8014fdb) --- net/nginx/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/nginx/Makefile b/net/nginx/Makefile index efc3c0fef3..e93acd1b65 100644 --- a/net/nginx/Makefile +++ b/net/nginx/Makefile @@ -18,7 +18,7 @@ PKG_HASH:=f9187468ff2eb159260bfd53867c25ff8e334726237acf227b9e870e53d3e36b PKG_MAINTAINER:=Thomas Heil \ Christian Marangi PKG_LICENSE:=2-clause BSD-like license -PKG_CPE_ID:=cpe:/a:nginx:nginx +PKG_CPE_ID:=cpe:/a:f5:nginx_open_source PKG_FIXUP:=autoreconf PKG_BUILD_PARALLEL:=1