{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2025-04-14T16:45:54Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/document/package-libasound2","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/alsa-lib/package-libasound2/alsa-lib/UNIHASH/document/package-libasound2","https://rdf.openembedded.org/spdx/3.0/link-name":"6970911f46c624928fd2b8ba35fb6f8a62bcac39eb7c3d214cc21da733d420ee"}],"name":"package-libasound2","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/package/libasound2"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/package/libasound2","creationInfo":"_:CreationInfo0","description":"(Occasionally a.k.a. libasound) is a userspace library that provides a level of abstraction over the /dev interfaces provided by the kernel modules.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6970911f46c624928fd2b8ba35fb6f8a62bcac39eb7c3d214cc21da733d420ee/alsa-lib/UNIHASH/package/libasound2"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:alsa-lib:1.2.14:*:*:*:*:*:*:*"}],"name":"libasound2","summary":"ALSA sound library","software_primaryPurpose":"install","software_homePage":"http://www.alsa-project.org","software_packageVersion":"1.2.14"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/package/libasound2/file/1","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6970911f46c624928fd2b8ba35fb6f8a62bcac39eb7c3d214cc21da733d420ee/alsa-lib/UNIHASH/package/libasound2/file/1"}],"name":"usr/lib/libasound.so.2.0.0","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"def2300495fcf43339fa3e243fea893a748528bd3aa03e279cb186c70c776a32"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/relationship/0a74cfd5311cbb2602c8c332e4fd2fab","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6970911f46c624928fd2b8ba35fb6f8a62bcac39eb7c3d214cc21da733d420ee/alsa-lib/UNIHASH/relationship/0a74cfd5311cbb2602c8c332e4fd2fab"}],"from":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/package/libasound2","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/98e5888aa9a0a3c56217568965c4e2e312620fee9e21cc23d8d543dfcd2b5865/alsa-lib/UNIHASH/vulnerability/CVE-2026-25068"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/relationship/6c6adaa1d84ba5e62a7c1179ce118402","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6970911f46c624928fd2b8ba35fb6f8a62bcac39eb7c3d214cc21da733d420ee/alsa-lib/UNIHASH/relationship/6c6adaa1d84ba5e62a7c1179ce118402"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/98e5888aa9a0a3c56217568965c4e2e312620fee9e21cc23d8d543dfcd2b5865/alsa-lib/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/package/libasound2"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/relationship/c75edfa283306dfd1b6d4e7dae272f78","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6970911f46c624928fd2b8ba35fb6f8a62bcac39eb7c3d214cc21da733d420ee/alsa-lib/UNIHASH/relationship/c75edfa283306dfd1b6d4e7dae272f78"}],"from":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/package/libasound2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/98e5888aa9a0a3c56217568965c4e2e312620fee9e21cc23d8d543dfcd2b5865/alsa-lib/UNIHASH/license/3_27_0/LGPL-2_1-only_AND_GPL-2_0-or-later"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/relationship/cbffe6b0b26c01c26146febaa111c3d7","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6970911f46c624928fd2b8ba35fb6f8a62bcac39eb7c3d214cc21da733d420ee/alsa-lib/UNIHASH/relationship/cbffe6b0b26c01c26146febaa111c3d7"}],"from":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/package/libasound2","relationshipType":"contains","to":["http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/package/libasound2/file/1"]},{"type":"security_VexFixedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/vex-fixed/051a32baf650d7658bc7a775c4ab1480","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6970911f46c624928fd2b8ba35fb6f8a62bcac39eb7c3d214cc21da733d420ee/alsa-lib/UNIHASH/vex-fixed/051a32baf650d7658bc7a775c4ab1480"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/98e5888aa9a0a3c56217568965c4e2e312620fee9e21cc23d8d543dfcd2b5865/alsa-lib/UNIHASH/vulnerability/CVE-2026-25068","relationshipType":"fixedIn","to":["http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/package/libasound2"],"security_vexVersion":"1.0.0"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/88fd7ea83c657f0c7115540cff431422d48dfdb6e55a0524589be7877d60a1da/relationship/ddeeee8c7a270b15b5d3f90ac6044e02","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6970911f46c624928fd2b8ba35fb6f8a62bcac39eb7c3d214cc21da733d420ee/alsa-lib/UNIHASH/relationship/ddeeee8c7a270b15b5d3f90ac6044e02"}],"from":"http://spdx.org/spdxdocs/alsa-lib-0e923ac2-633b-5a43-8d16-e9f6bca7d7cb/724c120e04b3dc9ff68e70b6545d6795298a600c6d4d66b183c29e57fe85c6b8/package/libasound2","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/d52661681411b6c6e23b58cd38079b96fcd08bbae340e20c7e216974e0ed5069/alsa-lib/UNIHASH/package/alsa-conf","http://spdxdocs.org/openembedded-alias/by-doc-hash/0a4bfdc22a679da58409f2bd8caff736fe4557f8873e7ec5e346d3eba17e36c3/alsa-ucm-conf/UNIHASH/package/alsa-ucm-conf"],"scope":"runtime"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"}]}