From 973a26fc6308816de542b5a55a590868b8014fdb Mon Sep 17 00:00:00 2001 From: Roman Azarenko Date: Wed, 13 Aug 2025 13:28:33 +0200 Subject: [PATCH] nginx: update CPE ID Looking at the official CPE dictionary [1], `cpe:/a:nginx:nginx` was only used until 1.21.4 inclusively. Later it was renamed to `cpe:/a:f5:nginx`, and it showed up in a few more non-contiguous versions numbers after 1.21.4. In all nginx security advisories [2] starting from year 2024, the CPE ID used is `cpe:/a:f5:nginx_open_source`. This includes versions 1.25.0 and newer. Update the CPE ID to the newest known value of `cpe:/a:f5:nginx_open_source` used in nginx's own security advirosies/CVEs. [1]: https://nvd.nist.gov/products/cpe [2]: https://nginx.org/en/security_advisories.html Signed-off-by: Roman Azarenko --- net/nginx/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/nginx/Makefile b/net/nginx/Makefile index 1bbbce853d..cb1d51cf71 100644 --- a/net/nginx/Makefile +++ b/net/nginx/Makefile @@ -18,7 +18,7 @@ PKG_HASH:=69ee2b237744036e61d24b836668aad3040dda461fe6f570f1787eab570c75aa PKG_MAINTAINER:=Thomas Heil \ Christian Marangi PKG_LICENSE:=2-clause BSD-like license -PKG_CPE_ID:=cpe:/a:nginx:nginx +PKG_CPE_ID:=cpe:/a:f5:nginx_open_source PKG_FIXUP:=autoreconf PKG_BUILD_PARALLEL:=1