+++ This bug was initially created as a clone of Bug #199505 +++ NVD provides example CPE string under Configuration 2 in https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1821 $ make -V CPE_STR PORTVERSION=1.31 cpe:2.3:a:tuxfamily:chrony:1.31:::::freebsd11:x64 # before ports r362439 (CPE v2.2) $ make -V CPE_URI PORTVERSION=1.31 cpe:/a:tuxfamily:chrony:1.31::~~~freebsd~~ It may help pkg-audit(8) in future to notice vulnerabilities earlier.
Jan, havent you forgot to upload a patch?
Created attachment 155769 [details] v0 Indeed.
A commit references this bug: Author: robak Date: Wed Apr 22 11:43:13 UTC 2015 New revision: 384486 URL: https://svnweb.freebsd.org/changeset/ports/384486 Log: net/chrony: add CPE info PR: 199513 Submitted by: jbeich Approved by: portmgr blanket Changes: head/net/chrony/Makefile
Committed, thanks for your work!