cpe:2.3⭕linaro:op-tee:4.3.0:*:*:*:*:*:*:* is a valid CPE ID. See: https://nvd.nist.gov/products/cpe/detail/2754E8CF-9BD5-448D-9F32-CFAC92278CD9 Note: this commit needs to set _CPE_ID_PREFIX because optee-os CPE "part" needs to be set to "o" (OS), while the default Buildroot prefix is "a" (Application). Signed-off-by: Daniel Lang <dalang@gmx.at> [Julien: - add extra info in commit log (and fix CVE to CPE) - add a new line after OPTEE_OS_CPE_ID_PRODUCT for readability ] Signed-off-by: Julien Olivain <ju.o@free.fr>