gh-112844: Fix xz CPE identifier (GH-117656)

miss-islington · sethmlarson · web-flow · commit d9e212601390 · 2024-04-16T22:20:47.000Z
(cherry picked from commit d70ee13) Co-authored-by: Seth Michael Larson <seth@python.org>
diff --git a/Misc/externals.spdx.json b/Misc/externals.spdx.json
@@ -160,7 +160,7 @@
       "externalRefs": [
         {
           "referenceCategory": "SECURITY",
-          "referenceLocator": "cpe:2.3:a:xz_project:xz:5.2.5:*:*:*:*:*:*:*",
+          "referenceLocator": "cpe:2.3:a:tukaani:xz:5.2.5:*:*:*:*:*:*:*",
           "referenceType": "cpe23Type"
         }
       ],

Original file line number	Diff line number	Diff line change
`@@ -160,7 +160,7 @@`
`160`	`160`	`"externalRefs": [`
`161`	`161`	`{`
`162`	`162`	`"referenceCategory": "SECURITY",`
`163`		`- "referenceLocator": "cpe:2.3:a:xz_project:xz:5.2.5:::::::*",`
	`163`	`+ "referenceLocator": "cpe:2.3:a:tukaani:xz:5.2.5:::::::*",`
`164`	`164`	`"referenceType": "cpe23Type"`
`165`	`165`	`}`
`166`	`166`	`],`