12 files changed, 99 insertions, 39 deletions
diff --git a/app-arch/bzip2/ChangeLog b/app-arch/bzip2/ChangeLog
index 00ebab5ae035..4b7d6cb6e245 100644
--- a/app-arch/bzip2/ChangeLog
+++ b/app-arch/bzip2/ChangeLog
@@ -1,6 +1,9 @@
 # ChangeLog for app-arch/bzip2
-# Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-arch/bzip2/ChangeLog,v 1.104 2012/05/17 04:36:15 vapier Exp $
+# Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/app-arch/bzip2/ChangeLog,v 1.105 2013/06/05 00:08:52 vapier Exp $
+
+  05 Jun 2013; Mike Frysinger <vapier@gentoo.org> metadata.xml:
+  Add upstream CPE tag (security info) from ChromiumOS.
 
   17 May 2012; Mike Frysinger <vapier@gentoo.org>
   +files/bzip2-1.0.6-mingw.patch, bzip2-1.0.6-r3.ebuild:
diff --git a/app-arch/bzip2/Manifest b/app-arch/bzip2/Manifest
index f875edff5aa0..cf948408ca5d 100644
--- a/app-arch/bzip2/Manifest
+++ b/app-arch/bzip2/Manifest
@@ -1,3 +1,6 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
 AUX bzip2-1.0.2-progress.patch 6141 SHA256 a76f6d082a1a1fef2eff111177d7c7568e1d457fb2b98cde71bbbe6ea1c7c787 SHA512 b6810c73428f17245e0d7c2decd00c88986cd8ad1cfe4982defe34bdab808d53870ed92cb513b2d00c15301747ceb6ca958fb0e0458d0663b7d8f7c524f7ba4e WHIRLPOOL 06d940b0c1e389ffd97477c3b0f36dd39e017fba9332fbc6df80987498e15bdce700d0a8b0962e1d88e3a321ed50551e5eb048721be9a3af5f00ffcd63d3d899
 AUX bzip2-1.0.3-no-test.patch 161 SHA256 806dcb0f9f46a2b0b3ef04212405708198a25e281617e27a44c565948c159a49 SHA512 a07f04189bce8a53980f324769cc8eb79eed9e42cbed223b74f566802e61eacb45e677c122266689a654d4fc946cba4a2171c72be87f98e4996c6cde5cb0c462 WHIRLPOOL bf32302ea76029ca01c07e70024460ab8cde0c4db84ebad1b0fe66717f465f515b96c70fe67fb7d0f48233e3bd883f77dc83c489e8a0418c982ff416e66c1c11
 AUX bzip2-1.0.4-POSIX-shell.patch 672 SHA256 34bc42c1d6c980e0970a517c9602b904efb2f676ec191e80fcbcd185ccb6b1fe SHA512 7fc5e34ac2fccb7e096bafa6dd934fb72375c17e0cfa3e0549648ecc82ec44521eb8f8ac3ce49a4064ee67fa9319da9e52db86a971443956f71d11c056289d19 WHIRLPOOL 42d9a3b0ac26fc59ee74fa5fb1b7f74a6c4cebab13100ed1165e6d8d40bddfc58425b0a3018f6e6216789fad498e25419199c020df24197a8ca5730ccb2d8e36
@@ -11,5 +14,22 @@ EBUILD bzip2-1.0.6-r1.ebuild 2183 SHA256 4d7615ffc4a8b3fa39d5626a7c2fa3d18ec9e34
 EBUILD bzip2-1.0.6-r2.ebuild 2155 SHA256 664d950904d6a048cb299fc6eb93f18cb820c6fa009b32394d72b255c627eb15 SHA512 5187182a3260c6e131d72a78c86beceab6cadedac9e2410a7e0ae1e1fd4596baefbf457b415c8c3ad964d3a7d141a20dcab4bc95be031d76e5764d2ac0e429b3 WHIRLPOOL 261c2b2fdebac16d41cf5b8deb5f6f0c31f9aa715fac0366b53b28932be5f614990c837bd55cd29333bce1de5567c4cbbc968365eef4829207adac2a62b70ace
 EBUILD bzip2-1.0.6-r3.ebuild 2426 SHA256 780f1ab3808463a24d83316973eea0b70477104f5f304ba66a4ef2a899695363 SHA512 ce8e0b2c93ce84efe8356348f24d4f3ff6877a6295e41ddd8848b46bc9c08be89ced4d1b17c7a669cd7361c41ed8d539be82b997a2048214f66d000fc5c3661c WHIRLPOOL 1bc5264b6840881bc67396795ae5d6f59a1b32d221827c547d0de183534fc6637aef6fdac92fa5f6b4b92c0ab74f89545d0445c1dbe3ef62c5ac629c671b664d
 EBUILD bzip2-1.0.6.ebuild 2045 SHA256 c8d2600e7a05cfe24a1c252ea0a44f66ea6239dc9f87ee8d2c1fd06e32e69196 SHA512 5c8a274078b798d74f66f41fb44691b80f5c077d2f68fd0416fa8d1ab2f4a1fa73d0a6e87c8b8851fb98cd235fd4c10cbc72ef29512b1b27b841e8ed3ab1d725 WHIRLPOOL 8e2215e34cae5792eb025490a9dad88b6458f127ed2dd2abd09e8c973ae5c07e618237b3ff4da1eedebf277f6826cc2e12f859be9ba67df92199aa57e827b04f
-MISC ChangeLog 15840 SHA256 2dcc99095b58b21cc0b06137633105a0846e82a12a33a833d1ef184d73dab96b SHA512 95862e85bc1cf6c51b75992ad8080dc34209c181d0e7a82fe41b27391f9c1a04d9035b1152744382208cc536ebd20f414f09838fa89915a1c5cd1ef43eff8f1a WHIRLPOOL c5e50bee4b860ded34bac9bfe672ead6ebcf6f826a50b3bb2f204ad2278f3ad5a487371dab7544bd6d89b5a914d57f096d3492724dfbc0156692c7f25082c2c2
-MISC metadata.xml 164 SHA256 f5f2891f2a4791cd31350bb2bb572131ad7235cd0eeb124c9912c187ac10ce92 SHA512 8eb0d5153d388f6ea069c64b93882244816a0a09aecc0d73cb872121ce0eb24c5ccafa96aad0b620b2300f319e1af101fa7fa6c5d0d561719d49bb07da0a2eca WHIRLPOOL 11a1441bddb7a6c69653c663902b7da5767ae6ad515ac2aabfc42fe37927a1ccc21472deeee454009ff720201a41c3e4a912df42661a0a87150fb46126da2d52
+MISC ChangeLog 15961 SHA256 556514cfc6b9ec61a85754202f4ddfdbc211776a3dd5c17026b5d3b59fcad97f SHA512 84afb382da7ff493fadd857bb9930f116ced35b614e408a3c46b6b929fa0086f78d28be71591e83357f1f84299e496911669f605d22705ee8de9b75594f21358 WHIRLPOOL 2a858f1062708fa42b4081dbe06311819a32f58f72e60860a3aab1c96428683e8af2e3b7d17b8f6aee86619860bb67691ec475349ee275d0ec6928ff885b187e
+MISC metadata.xml 241 SHA256 c9ef9f8a652ceb4655983472cec571c6762f53934447a83b38b311cf9e50254d SHA512 23ed7f7371d00caf97235d7a4f905286637cd286f9e8fc7c0413865dbab0772ff00dd9ecf65b5f199d694b42f032dc14ad9d3ac447cf1bb95124abf9203c0f1d WHIRLPOOL d687e040f4378e573d241a08b46ba7bd0f4c9d5ef4c9cf836a479102e5f8902e67244308747adf34b6bc605511244d37873b796f8089dc3e181a627302843d02
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.19 (GNU/Linux)
+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+=2re2
+-----END PGP SIGNATURE-----
diff --git a/app-arch/bzip2/metadata.xml b/app-arch/bzip2/metadata.xml
index 96a2d586367d..80408f474306 100644
--- a/app-arch/bzip2/metadata.xml
+++ b/app-arch/bzip2/metadata.xml
@@ -2,4 +2,7 @@
 <!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
 <pkgmetadata>
 <herd>base-system</herd>
+<upstream>
+  <remote-id type="cpe">cpe:/a:bzip:bzip2</remote-id>
+</upstream>
 </pkgmetadata>
diff --git a/app-arch/sharutils/ChangeLog b/app-arch/sharutils/ChangeLog
index 10a79da2f905..25e33b2df43a 100644
--- a/app-arch/sharutils/ChangeLog
+++ b/app-arch/sharutils/ChangeLog
@@ -1,6 +1,9 @@
 # ChangeLog for app-arch/sharutils
 # Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-arch/sharutils/ChangeLog,v 1.113 2013/06/02 08:38:35 ago Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-arch/sharutils/ChangeLog,v 1.114 2013/06/05 00:09:03 vapier Exp $
+
+  05 Jun 2013; Mike Frysinger <vapier@gentoo.org> metadata.xml:
+  Add upstream CPE tag (security info) from ChromiumOS.
 
   02 Jun 2013; Agostino Sarubbo <ago@gentoo.org> sharutils-4.13.5.ebuild:
   Stable for sh, wrt bug #470298
diff --git a/app-arch/sharutils/Manifest b/app-arch/sharutils/Manifest
index e7a400cb8982..230267bbea43 100644
--- a/app-arch/sharutils/Manifest
+++ b/app-arch/sharutils/Manifest
@@ -1,11 +1,11 @@
 -----BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA512
+Hash: SHA256
 
 AUX sharutils-4.11.1-no-gets.patch 816 SHA256 d7b16414b6da9babe28dba56a42ef7f5b0aa10a9bcd55d069ccdade32076e7ec SHA512 8bf93fa30a02bc5d084c2aa85d148ab9c3f1ee67745824d0408130d79a68cc07e0cda14e7d748433e2d4901a4d7661f97c6a67c805623ef6de24baaff71b3777 WHIRLPOOL e3721a0b7518444778bdc8640b65f7c5d0827e48e14171567426e250850639a498d677f705f779f4d5077381a395f00bbb09fe87908196ee314034d0b4326d27
 AUX sharutils-4.6.3-interix.patch 473 SHA256 95bc9ffbc335e4ac0f5fc8d598be1907d0e66f74b09e5a104476935458ebf453 SHA512 f46bf32ae5119f6453d65306553a6540476c08fd55abafad1f4bc13e6028c57a1e1e71bdffa7c60ff57dd639212336b83179752654dc0f6d31fa959409f4a4bc WHIRLPOOL 904fabf1a913562ce7d23234d9e6761504fdaffa3442a48771648fe1f362af4d12b7576e4fcd3f8548707317758f019765a7ac2a8ec6feb85df724022f024a46
 DIST sharutils-4.10.tar.bz2 920944 SHA256 b0fc4e1839296bb179840d60ac614e96368ddd8703bfbcffff7c97a6b9472f61 SHA512 0373e482fec2bb88d5da84e14bf27b3eebe47a67e3c203c3b4918fddfc68eb6c879403917aa7a3de6fe45eb3806ac3a08f2f8d7f8423ee8c8cb3b922dffbc159 WHIRLPOOL b4fe9bb2b0928a5a44e05664fc5bfa7e0fc303463a727a611109ef533d6dfeada9a4299af827ce6d09191fe9467662d6d72f3d8b5722e8e67287475dad34bf7e
 DIST sharutils-4.11.1.tar.bz2 1000885 SHA256 6f48ed90b7e27046addaded1e6b434c7c41e606ddfe9d8dea335e6fbc2a354d5 SHA512 7f20ac250b0c31cff34eba7addbdbb747ebb23dc42e98af6552d1484d993c9c71ed7e8213561c23e0d95cbaa1d91a25706c25c0853637a1c975b9b81c9a228f7 WHIRLPOOL 023bd837074e5b9bf2766a933a88b44f182f2761ca73ab5568bc2d09833c14e2a7060496dddbe70abc6af72de6d9876289fa2bdc8c136782d680e77eacbccd31
-DIST sharutils-4.11.tar.bz2 956779 SHA256 3ee2e683000fedf70d6912d4939617a290b5ecc4a45d249b9cd54d8bc1c6c667
+DIST sharutils-4.11.tar.bz2 956779 SHA256 3ee2e683000fedf70d6912d4939617a290b5ecc4a45d249b9cd54d8bc1c6c667 SHA512 45663ed8b85bb93dd544ed97ebc3ecb3540b2ad454b3b03f3c94ad8c7fe16384a5ea86fee284101d3f8bf48287cfa8947fc3cf9abbcd009cc47a5f7a2f267c6c WHIRLPOOL 6a18674cb9a05a8f4e9db0bf5095ad6813563d0c517f936faddcabb2f98256170173273daf6451a4613c8d5b7dbcad41cc1858cb0260a4acb633f50d31caaa1b
 DIST sharutils-4.13.1.tar.bz2 1226061 SHA256 8c055f125ed85bb90747b62448907e78534d83afaf1077638698c233140fd468 SHA512 46eeecc4fbd664e1077e4f1138b9de2338449e1afa5b1d2fc7ee4ce640e92903c20d4e8fc0dbc341edba19cbbded9ec947b5976f5cfcdd389ef0ba162cddde05 WHIRLPOOL c6d10bdad4c244ee9ef37fb1fbb96ce379a82d027d4614c23fd04f6b85113f90bb65cde7ac58048b53a7fb1559e1390f22711253f724ae23299712b872073bc2
 DIST sharutils-4.13.3.tar.xz 962200 SHA256 871fe6e7e00b1de159f47d2e3bd1fb46c3d21ec6ba305f73e339402a8809c295 SHA512 0687ae7958921d6b365c9f055148a2f2263af30ef5729295ef39b3216ad539adfff09e0c996551f1fcf96ae58da50f5e576db74bd9724077429571eed42cf4b9 WHIRLPOOL d48f2b797a62dfe103a29ccda4694869e6139b8eab930404dd678631898a197060ed95d2c581796e4a653a7037dd42a4f02a2b155a4b45a14bf4f1edab0dc810
 DIST sharutils-4.13.5.tar.xz 1066016 SHA256 c73a828368647679f8f843eda11b78de5bc659fa059e782a405ae20ddd88b1f0 SHA512 8bf1dddd8b89d94df2d7273db8d579f2074250961ef273bf02cd204d9b98abff8fcb332915245b3b2a05a3f791ce4e498df4194a9f4185886279f424647db836 WHIRLPOOL 982bf4dabe5ea3045807add3a2b3e37ad13a890f03a7643a879139a24c3f816589f94687a04db544934bec7079bcddca4a22ba478d1b9caf3dae74d6ba185789
@@ -15,22 +15,22 @@ EBUILD sharutils-4.11.ebuild 891 SHA256 abb9b5dd3370ea3006c46c145f7fbd5e3a8e2d84
 EBUILD sharutils-4.13.1.ebuild 782 SHA256 e7626922111c6dd98905feee392e09b754cb33bc73d9ed1773b8b9c63c8fa9ef SHA512 324e096f77083a1f696acf8e98d3251f30f79f3b5d2c723f7be35cc6c0a313fb12ef7733eb9959627147985866322dbb63b179d3d4074d6c830a1cefeb701596 WHIRLPOOL 7b4bf32a208bbfb26c7899c14abe25cc57b42ff46fb0747075bb33a8961d5d08d85d1897b95e3c4e0a4010c470619446407e447e4063fb63f76062886fdf6e85
 EBUILD sharutils-4.13.3.ebuild 765 SHA256 17973cf56c6a54b1aca506f6a231b0f86799bb010685b479a1e2a8bb34f7574b SHA512 5b78130f3fe78c651c8447b9d40040d7f0f2209d57832b8b67ae2d37c092f232b3a1f02613587a4efb6f1343b0f4c219b886d0c35f79499ebc9b506322c4b4ec WHIRLPOOL cee7953508513d7b2f8cfcdcccf4cf5dc1e6b2152a499aabc186d59f2ae894e063e154b6df305bbb6296f33f158bb6b41c59ffbeb46cd6acfe75d7de4401a5e5
 EBUILD sharutils-4.13.5.ebuild 784 SHA256 7f166e6f06a2185434a9fa8f6c38bad93911506b9069d91fbfdb3cf87de9a195 SHA512 07b3805dc439d469aa64ae1d8c7b9d69c61b5580726d84fcba0f6214440544e95e5402f58a1632030e695b0f1238576b70ccfd8c3f61df225a12380d84172b97 WHIRLPOOL 3082d697608f2548ceb6a6a33688a9f77d7bd2b2eb1eea951a39808dc1fe638f779b5caa796df5a71d09ba7c941cd80324b4f3a5fa5136e5f45143164dd02dc5
-MISC ChangeLog 16142 SHA256 f3b714ba13ced330e31af6835d45d6065a90dcf117a18edfdc3b288d42a97170 SHA512 c702bf91bc7d14c2db98bea986fe4865005e578fdccfc7580fb1daf147873b7d478c7618b8e5502f1b67412ec5e1d6327220d688629a8f57f789de989f24b4f7 WHIRLPOOL ba5ebf9e34e4e7215e18957c3619ba9379bdf42258bf0dc5b9dc91e4e89a2a818ac113ea13f587d8175ce5d13062a88e007f433cc7416e699d1ccd031c46b957
-MISC metadata.xml 164 SHA256 f5f2891f2a4791cd31350bb2bb572131ad7235cd0eeb124c9912c187ac10ce92 SHA512 8eb0d5153d388f6ea069c64b93882244816a0a09aecc0d73cb872121ce0eb24c5ccafa96aad0b620b2300f319e1af101fa7fa6c5d0d561719d49bb07da0a2eca WHIRLPOOL 11a1441bddb7a6c69653c663902b7da5767ae6ad515ac2aabfc42fe37927a1ccc21472deeee454009ff720201a41c3e4a912df42661a0a87150fb46126da2d52
+MISC ChangeLog 16266 SHA256 29202ebc88d3e1afd1378ce03dae69898de9f591229258ff7800aa35c4bed807 SHA512 367cdeb0ad350b63718d039b0aa57baca8a7690c44b5a7cbc0ef450be88d7852081c29064efa3f00c5fb7f77cbbcf9bb9282d6b580f0bf9e39283539aad34e3f WHIRLPOOL f6869ba6128283905f0da25b382d82ceb0577921127bcdd93c38f54238b368ec124766c7e0092ce5286818b985d33443964b415ef9796f786bed5df848a0c90b
+MISC metadata.xml 244 SHA256 3073a0d0ce6ecd878d726cdcdf348a2652d532e585bf1662436c206576bf3894 SHA512 6562864daa2df88546326dc139f0863c7fa657effe35b23ce36784b97772c77502ae07182f279d8b826a87b0d8c98f6011672d87a5fe3736605c21f63ac843fa WHIRLPOOL f9c188cf0f3ee238e7b4ab9671283d8a2065835e34adb318f21841f79f9defeee86e6866d7b56991423219dd4bbfd2d1878383c6059d12b262ced01694ef47a5
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.19 (GNU/Linux)
 
-iQIcBAEBCgAGBQJRqwPhAAoJELp701BxlEWfkVMP/08VxsKlNjqrZ21DyzQ44CwH
-EbFFxnnLBt+UWICa6S+Kxm0muPlAuUfV+sDt1SdP8PocOh0IsV3CVHeoSrdoDG7L
-3WxLlphswaUJAcD1HBC8Rm1bQMxb0/8IPdB3N96QkmZ3Ed2ZpzcXa9tRBnUk4iyS
-7DSNNvHhOurNj60+ba/Izf4ZitdCOlrq2IJhQq5lj2XRmLJgAFH225nAZoQiIXLx
-ay30zos5oF/Wl10jMhIw61SlFNe1OEWkruTnjaBsbg9I53jvSoyjcgCTnvTJtKZ7
-B42hWUZpvjI/UKrd1lz/g79MaE9LfuyCK0T66lAnVmtMEDi55wedmlMu3Q0GJy8M
-GyC6Hn9pdW8XE8TBzBjnT9BnejwtBjmXt2hzQlz3NB3XEilZE91UnPCqjDCipCNT
-WNLtcDXg9wD+pLwipasoQS/kn3j9HdXedmMQsWczvzHaooZxCMKAYPRCC3ndkbfY
-b8ws2OyeRrPiyuQpchy6yjwaboh4gyWpd8bqRSmN+n1srxlDo0FAl8zDsHirfct5
-/h+e0xn7mFkKqaqmlnn9zQY9QYC8oQRfLj/d2eVMxR7BrfnhZbQz4EzH1iIRmO5c
-taGaqnZDMuhi6gzC1OTmhCIduiTtBS5ms7OlfaygysElWjb4EXfdvR+P3Za53JnL
-FLWSfRJ3p9NGQYLfCY2B
-=XhFA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+=Zxcf
 -----END PGP SIGNATURE-----
diff --git a/app-arch/sharutils/metadata.xml b/app-arch/sharutils/metadata.xml
index 96a2d586367d..801bcd0759e5 100644
--- a/app-arch/sharutils/metadata.xml
+++ b/app-arch/sharutils/metadata.xml
@@ -2,4 +2,7 @@
 <!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
 <pkgmetadata>
 <herd>base-system</herd>
+<upstream>
+  <remote-id type="cpe">cpe:/a:gnu:sharutils</remote-id>
+</upstream>
 </pkgmetadata>
diff --git a/app-arch/tar/ChangeLog b/app-arch/tar/ChangeLog
index b651b2215cca..7da5a5ef4950 100644
--- a/app-arch/tar/ChangeLog
+++ b/app-arch/tar/ChangeLog
@@ -1,6 +1,9 @@
 # ChangeLog for app-arch/tar
 # Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-arch/tar/ChangeLog,v 1.188 2013/05/24 20:22:02 aballier Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-arch/tar/ChangeLog,v 1.189 2013/06/05 00:08:48 vapier Exp $
+
+  05 Jun 2013; Mike Frysinger <vapier@gentoo.org> metadata.xml:
+  Add upstream CPE tag (security info) from ChromiumOS.
 
   24 May 2013; Alexis Ballier <aballier@gentoo.org> tar-1.26-r1.ebuild:
   keyword ~amd64-fbsd thanks to Yuta SATOH, bug #432410
diff --git a/app-arch/tar/Manifest b/app-arch/tar/Manifest
index 6cc25ae43433..f1b259358bb0 100644
--- a/app-arch/tar/Manifest
+++ b/app-arch/tar/Manifest
@@ -21,12 +21,22 @@ EBUILD tar-1.25-r1.ebuild 2211 SHA256 9b304f5ba2666e3b4ac88bbe297d9f085a950f9782
 EBUILD tar-1.25.ebuild 2046 SHA256 641913056b4b75a35a7d15313e39470feba3bbd5260d7758de677fba905bec53 SHA512 9558829f9a050dc08a66e782e7cb7a3d41a7ced848edf6a5aefbcfa2c3383d21cc97689bac3be560294ef229f526ee7df6240668f6cf780b25e7d1d7988fe76d WHIRLPOOL a26ce922307db26581ddd85bc0bde4426fa109d3004c99fdbccb7d4fa2cffd3247edfc04038448e0b2325501fc30a624b347bdc76fbcf1d7fddcca461ea84dbe
 EBUILD tar-1.26-r1.ebuild 2285 SHA256 6ae4ca006bef7de9ada2cfb574a122dfdab49e977b885cb3e3eb63c43b1a7051 SHA512 82b7a629b5392f3dfa141a40e199f695c9e3711ad2521261ed310c44f649fb8a210f6d96ee12066b596fffd89820451f6d2f31053aab012eb2f547ba8d8d671f WHIRLPOOL 2ce14d2a80d049d196e45ee9e0c3646830cc8ec1dcbd5905cbbd57cf2b593ff88835a042fe4d67332968bf0a4e80eda8dbfe77418125a7ae2568452d13396e1d
 EBUILD tar-1.26.ebuild 2083 SHA256 c5f1e044b62e51a08c3d7e94242cc4a731c8af0aad2046a248d79ef56a8e2aca SHA512 598cfe4a8825c09f4e86054c9823d590b32b593119277e89cad3b3dc42d67143efd9b22b7760d47d9cf8c0ec5280e254cf8f9e7571ca32cd91c64324e9ac12ce WHIRLPOOL 1051a2ff3b77e797cbffb21f00eca964405d485b2c453850126330196372d84895352a770623a5e27f3dd0eec075f084a6562c932d74b3e7b7a546cee94bedb1
-MISC ChangeLog 27816 SHA256 f84f7d4030ec7ea0b4d3e85cb99a8228e660593d75364134263f8185936c3c6c SHA512 2cc40f35f0801d47cc896c96cf96bee278ec295e78258e1e0911545f084beaf3046e41a1b19cacd2496fe0e379e03495371c6b6fdeeda5d63683500fe4a7c5ab WHIRLPOOL ebe3f61df646d2afc240262e9628b2bf087299125392a60ed483d34ac79a7237fc3e301291f2a3615f8f28dc064c261998eb61c473d388acbd35cdf506a3670e
-MISC metadata.xml 225 SHA256 7e10b7c3589b0fdd1eebc86621eb46cac353f984cf145ba8ea9dd531d6fd50c7 SHA512 9c88738429b71755d268fde870836dc2ef45cd386ec639f63212e76705083e7eff59fa8ad7ef33a84545ee757c2c0aa305a0d90bbb252cb2b2b9067e418faf50 WHIRLPOOL 468be02690ad32ed9b9ae70e8812ac2a3fb0d8a22cd3f4bfde2a34d4823039d4729b15a6386979db7ed1994fd59e418d2f5e0658e43efa1e55430273ad5c95ec
+MISC ChangeLog 27935 SHA256 068341a7fe3a89886b6b8c421c97d48a8e2296ff3c0c3118e6a4f9eb68e0e5af SHA512 d1a86e2d1c4d22f8fa8acf69ea76164927db24d8e48327cdcbe76b686de6f53ff29944d667c0381ba7b0b6c8806b62112baf6679ff670cc2a0b62718eb101b71 WHIRLPOOL 8154be146a24271681ae07786bebbd9f19162c14bc0397de7b5d9fae71af4c9cdd4cc6604b292ef079403ca29d65921b5c32d993b975cf9107abf535a8ff7162
+MISC metadata.xml 298 SHA256 776c92889812df8f8dc072ae2ac1d7091f1613afc6332eccd0e20a0d90caaf0b SHA512 9e7e0d3343fc95c9164d7b5cd7bf9a8cc21d5bba06af0ce19f693f8e6039415ab472411fba602fb99a1728529774cd85e828311a77c34d1f157cf4fedea59f65 WHIRLPOOL ddeaf15e3d36ed3c9e0ac13b17e49a187d0855255f38bf60a3726bd10ebaddbfc269a2101bbc64d4c8f69491228165016b2d76b15aabbd9bc3a0bd1732ca8f2e
 -----BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.20 (GNU/Linux)
+Version: GnuPG v2.0.19 (GNU/Linux)
 
-iEYEAREIAAYFAlGfy+wACgkQvFcC4BYPU0p/qwCfUUBG3ev91KOBmSxoblmb5SJs
-nz8AoJf1R8rtZ6YEw8x5L3C8+lZD5qYi
-=xI/O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+=89Fv
 -----END PGP SIGNATURE-----
diff --git a/app-arch/tar/metadata.xml b/app-arch/tar/metadata.xml
index 455b61ea10bd..f8de3a933ff2 100644
--- a/app-arch/tar/metadata.xml
+++ b/app-arch/tar/metadata.xml
@@ -5,4 +5,7 @@
 <use>
 	<flag name='minimal'>just install `tar`</flag>
 </use>
+<upstream>
+	<remote-id type="cpe">cpe:/a:gnu:tar</remote-id>
+</upstream>
 </pkgmetadata>
diff --git a/app-arch/unrar/ChangeLog b/app-arch/unrar/ChangeLog
index 072f3ce61a98..fa5ecf7e3677 100644
--- a/app-arch/unrar/ChangeLog
+++ b/app-arch/unrar/ChangeLog
@@ -1,6 +1,9 @@
 # ChangeLog for app-arch/unrar
 # Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-arch/unrar/ChangeLog,v 1.200 2013/05/09 17:52:10 ssuominen Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-arch/unrar/ChangeLog,v 1.201 2013/06/05 00:08:39 vapier Exp $
+
+  05 Jun 2013; Mike Frysinger <vapier@gentoo.org> metadata.xml:
+  Add upstream CPE tag (security info) from ChromiumOS.
 
 *unrar-5.0.3 (09 May 2013)
 
diff --git a/app-arch/unrar/Manifest b/app-arch/unrar/Manifest
index 1cb31a400ba7..645958a4c2c1 100644
--- a/app-arch/unrar/Manifest
+++ b/app-arch/unrar/Manifest
@@ -9,16 +9,22 @@ DIST unrarsrc-5.0.3.tar.gz 206444 SHA256 bd23e23f9bca91d06da53a6f28fb15a0f76db4a
 EBUILD unrar-4.2.4.ebuild 1536 SHA256 24a35287af8304115446f7f0dc6955b30fc24ebe1fadda87db09c929b2accdc9 SHA512 bbcfbca3f99252d8af1be291f166c377c3e26408251a7275c6aad0f979fd3ff5f44f225972997675a6fb110acb8d67d014b74dc9fda7cbe076c19bf76300c7ad WHIRLPOOL d2031ed7497bbcf93b57238509b8a8dee688932dce9a9df859ab9eb2c3043e5c5f59f00f021bf9accb75405ba180aeddd14914a46afed3390a2e3dc7701776c9
 EBUILD unrar-5.0.2.ebuild 1527 SHA256 eac81f310c36d334d91570221796f8e3900b59a3f6a61e1b0e96cf6da97715c7 SHA512 15b7fd71409419a40aff8e9159ff82aa5b2d84b90f300edc47400ef3c4376d1fb0ab63483d91713d55dabf16b766a7d16930ff33b3644db07eade5cbd3f5b29f WHIRLPOOL 53bef514f7cfced2ace3d8897bf78208dd1c4977b9e52a8768430fda00744abe7d664c8cfb2c845e1c635473c967c4a53c84b3d10f2d4f4a33e2c816568d8a1a
 EBUILD unrar-5.0.3.ebuild 1527 SHA256 519b46edc9f494e70a368ea82cc152eda5e32690097fa4b82acbc43312834b87 SHA512 ca7ceeee9d044891799b2f15d28d60958dc7321005378a8bcd5aedc3f07c0b943c753b95cc415d882c0ed7b71c9f5b40e33fa4187e0b7a592eb934b081b71752 WHIRLPOOL 715fc329bbeb88b537452c40b94297672e88a22fbd761b35a31285dcf2fea5c44067b64000f271afd042a66164a9c7c32bc9ddb43a9809c870541ce2f05314d4
-MISC ChangeLog 23070 SHA256 8bbb4a0f5c335937bb483b591dbee4ff6569119f79432e53f39b29c08e07a718 SHA512 b1e9f2c9c0015e0a09a609e779c7386980b3e9d96e187847d551e948469c37700968e6dae737f24e12280c29d1d782d96aed18ac6372d2be23ed6f2effce329d WHIRLPOOL c698eff6be2684dc9e7640f32bcf94bba93d8bc1fd76c861ec03f6d142f46a5a13c22216ab62f8515e2acf74cf7e1c052a97f1a13c4bdbb0fd47e1eff785ea8b
-MISC metadata.xml 164 SHA256 f5f2891f2a4791cd31350bb2bb572131ad7235cd0eeb124c9912c187ac10ce92 SHA512 8eb0d5153d388f6ea069c64b93882244816a0a09aecc0d73cb872121ce0eb24c5ccafa96aad0b620b2300f319e1af101fa7fa6c5d0d561719d49bb07da0a2eca WHIRLPOOL 11a1441bddb7a6c69653c663902b7da5767ae6ad515ac2aabfc42fe37927a1ccc21472deeee454009ff720201a41c3e4a912df42661a0a87150fb46126da2d52
+MISC ChangeLog 23188 SHA256 29b3d455fb71a30d3933ce45edca8da143c8878358f8253db82d20e19a011f15 SHA512 656f39d1581cc6ca722cf8d10083b560ebf2890952f392713a5330fae75eab7f66399712eabe5642b40f08864124184cb90c7b0f8773543d5d240ffa66b75522 WHIRLPOOL 7b900c805b53ca2223d980d4cace0bb1797141379b7dc7e6b53bde99881a06e4b072648d95b9d3e23a3f52ee88c14799f38dcc30bed0800510cd9a37092b5efe
+MISC metadata.xml 243 SHA256 0d3b01bee239974acab3b5c25d987a03b929151a254aeefd3cb5bbd0ee6d3c57 SHA512 730e45ced90a8d71ae4613bc3e368baa66cc49c8b74177d23e03461d8785b20fcac940bef5a85044c9bc2f1db2fceee0de441267448174342caa0fe9d08a7034 WHIRLPOOL ab5dd604416cd7afbdee82d410c8eadaaceb8934ccca1a96c5c3f104f8beee50aa19d561a4fc0728c75cbb4683b822dab290c8031920087685fe732b7358bfbb
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.19 (GNU/Linux)
 
-iQEcBAEBCAAGBQJRi+InAAoJEEdUh39IaPFNzIoH/jHU0/2Djv/I/qiKP2Z7O9T3
-/9AUuWFB5Tn2tcLddATKqIWrtp+olRusxj/iONmwRSjoRtnWWFI4+cF21vlj9ms/
-rYQH+AuFMLcV5fWZTPs1q9QMgjjeqth5gNDmCdyFVG4fviZv7R9wbqTgoH2cxU1p
-wUT2AGoEgTuI80hYp6xCZhjAEYo01vDMwzBBkfC/TzrGiqC8BbrJM3hjSaUHlW06
-JJ6zW5aQew34OuekzGAj/RZFiWib7zDKYYn3v2Me1hzVaSiZI67xPVi6COEQB994
-FvlC28jWvcvFfe0xvYNu+Jk0C4m3NTOYRzeD5S48jIqGHLRTXvBnLRdFFYzUGg0=
-=P7W4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+=fe88
 -----END PGP SIGNATURE-----
diff --git a/app-arch/unrar/metadata.xml b/app-arch/unrar/metadata.xml
index 96a2d586367d..0ae854f6c4bc 100644
--- a/app-arch/unrar/metadata.xml
+++ b/app-arch/unrar/metadata.xml
@@ -2,4 +2,7 @@
 <!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
 <pkgmetadata>
 <herd>base-system</herd>
+<upstream>
+  <remote-id type="cpe">cpe:/a:rarlab:unrar</remote-id>
+</upstream>
 </pkgmetadata>