From ecbe6726d0196dae80c1090e93f0dcb23e71a1e6 Mon Sep 17 00:00:00 2001
From: Seth Michael Larson <seth@python.org>
Date: Mon, 8 Apr 2024 16:58:09 -0500
Subject: [PATCH] Fix xz CPE identifier

---
 Misc/externals.spdx.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Misc/externals.spdx.json b/Misc/externals.spdx.json
index 6df6401835c6f1..c0e72201777c9c 100644
--- a/Misc/externals.spdx.json
+++ b/Misc/externals.spdx.json
@@ -161,7 +161,7 @@
       "externalRefs": [
         {
           "referenceCategory": "SECURITY",
-          "referenceLocator": "cpe:2.3:a:xz_project:xz:5.2.5:*:*:*:*:*:*:*",
+          "referenceLocator": "cpe:2.3:a:tukaani:xz:5.2.5:*:*:*:*:*:*:*",
           "referenceType": "cpe23Type"
         }
       ],