The CPE currently is cpe:/a:mit:kerberos and needs to be updated to cpe:/a:mit:kerberos_5. It seems to me the transition from cpe 2.2 to cpe 2.3 cause a change for this cpe. It used to have the 5 which is part of the package name as part of the version string in the cpe when it was in 2.2. This seems to have changed in 2.3 which is an improvement as the 5 shouldn't be a part of the version string anyways.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=89ae9a135fc72a539ae9e5603dff2524b78e8870 commit 89ae9a135fc72a539ae9e5603dff2524b78e8870 Author: Michael Kochera <kochera@google.com> AuthorDate: 2023-08-11 03:24:23 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2023-08-17 06:22:35 +0000 app-crypt/mit-krb5: Fix cpe_uri Closes: https://bugs.gentoo.org/912369 Closes: https://github.com/gentoo/gentoo/pull/32251 Signed-off-by: Michael Kochera <kochera@google.com> Signed-off-by: Sam James <sam@gentoo.org> app-crypt/mit-krb5/metadata.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
Thanks!