From: Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Date: Tue, 16 Apr 2024 22:20:47 +0000 (+0200)
Subject: gh-112844: Fix xz CPE identifier (GH-117656)
X-Git-Tag: v3.12.4~221
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d9e2126013904f91380c25592986d284cd7bee19;p=thirdparty%2FPython%2Fcpython.git

gh-112844: Fix xz CPE identifier (GH-117656)

(cherry picked from commit d70ee13e575ae4832f2824add64dba77ce5ab7ad)

Co-authored-by: Seth Michael Larson <seth@python.org>
---

diff --git a/Misc/externals.spdx.json b/Misc/externals.spdx.json
index 12cbc54c756a..8080e1f3217c 100644
--- a/Misc/externals.spdx.json
+++ b/Misc/externals.spdx.json
@@ -160,7 +160,7 @@
       "externalRefs": [
         {
           "referenceCategory": "SECURITY",
-          "referenceLocator": "cpe:2.3:a:xz_project:xz:5.2.5:*:*:*:*:*:*:*",
+          "referenceLocator": "cpe:2.3:a:tukaani:xz:5.2.5:*:*:*:*:*:*:*",
           "referenceType": "cpe23Type"
         }
       ],