[Buildroot] [git commit] package/modsecurity2: fix deprecated CPE

Julien Olivain ju.o at free.fr
Wed Sep 17 17:32:33 UTC 2025


commit: https://git.buildroot.net/buildroot/commit/?id=843707ba1e4b51043cf4e068e52a36c54e510fe0
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master

The CPE 'trustwave:modsecurity' has been deprecated in favour of
'owasp:modsecurity'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/B305D665-44EC-44A6-8C46-C68BFDAD7C38
  - https://nvd.nist.gov/vuln/detail/CVE-2025-48866

Signed-off-by: Thomas Perale <thomas.perale at mind.be>
Signed-off-by: Julien Olivain <ju.o at free.fr>
---
 package/modsecurity2/modsecurity2.mk | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/modsecurity2/modsecurity2.mk b/package/modsecurity2/modsecurity2.mk
index b644fe7407..402ba6317b 100644
--- a/package/modsecurity2/modsecurity2.mk
+++ b/package/modsecurity2/modsecurity2.mk
@@ -9,7 +9,7 @@ MODSECURITY2_SOURCE = modsecurity-v$(MODSECURITY2_VERSION).tar.gz
 MODSECURITY2_SITE = https://github.com/owasp-modsecurity/ModSecurity/releases/download/v$(MODSECURITY2_VERSION)
 MODSECURITY2_LICENSE = Apache-2.0
 MODSECURITY2_LICENSE_FILES = LICENSE
-MODSECURITY2_CPE_ID_VENDOR = trustwave
+MODSECURITY2_CPE_ID_VENDOR = owasp
 MODSECURITY2_CPE_ID_PRODUCT = modsecurity
 MODSECURITY2_INSTALL_STAGING = YES
 MODSECURITY2_DEPENDENCIES = host-pkgconf apache libxml2 pcre2


More information about the buildroot mailing list