cpe:2.3:a:tpm2-tools_project:tpm2-tools is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Atpm2-tools_project%3Atpm2-tools Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 7e913bf36e57414720ade33edd7db3d3bcfce935) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>