Package: eyed3 Version: 0.7.9-1 Severity: wishlist Please add the eyed3 CPE in d/upstream/metadata. The value is useful for mapping CVEs to packages in Debian. The format is documented in <URL: https://wiki.debian.org/UpstreamMetadata >? As far as I can tell, the CPE value should be "cpe:/a:travis_shirk:eyed3". This is the one used for the old CVE.
-- Happy hacking Petter Reinholdtsen