gh-112844: Fix xz CPE identifier (GH-117656)

diff --git a/Misc/externals.spdx.json b/Misc/externals.spdx.json
index 17d9e372fd0b8931bd519b8c2d2655ef23727b8a..bef0ce7d7e61752d171f57853ad4bfcca0f7366c 100644 (file)
--- a/Misc/externals.spdx.json
+++ b/Misc/externals.spdx.json
@@ -161,7 +161,7 @@
       "externalRefs": [
         {
           "referenceCategory": "SECURITY",
-          "referenceLocator": "cpe:2.3:a:xz_project:xz:5.2.5:*:*:*:*:*:*:*",
+          "referenceLocator": "cpe:2.3:a:tukaani:xz:5.2.5:*:*:*:*:*:*:*",
           "referenceType": "cpe23Type"
         }
       ],