cpe:2.3:a:feh_project:feh is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Afeh_project%3Afeh Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> (cherry picked from commit 74adec4f3ab01336f24e8d1430c7a648bc8f5505) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>