package version metadata for external/

This will be used for automated notification of external vulnerability
reports.

Change-Id: I3fd7563f4ea89fa3e1dc597cb5f3773e620def55
diff --git a/README.version b/README.version
new file mode 100644
index 0000000..4937fae
--- /dev/null
+++ b/README.version
@@ -0,0 +1,4 @@
+URL: http://www.bzip.org/1.0.6/bzip2-1.0.6.tar.gz
+Version: 1.0.6
+BugComponent: 31870
+AllAdvisories: yes