{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2024-01-12T17:22:09Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/0862e6e995aae12a7be9ce783ee36fbf58014b7c904bf79af8806dc4dc3193ea/relationship/9be5ac0e997c8251b6df59a2af27fcdd","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ccd2a8a2f8a0c22cf3a94fbeda584ab564a1870c197fc6d60d2685c61ad3e741/pulseaudio/UNIHASH/relationship/9be5ac0e997c8251b6df59a2af27fcdd"}],"from":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/348ce3ee77a70ff35d743f0c4745300a62eaff45e262943a9e2fe8210cfb624c/pulseaudio/UNIHASH/package/pulseaudio-module-cli-protocol-unix","http://spdxdocs.org/openembedded-alias/by-doc-hash/81f2ac4c6ab35f49d52c9b1ce95e50dadc25b7130413bb2de44f2be5adf72f38/pulseaudio/UNIHASH/package/libpulsecommon"],"scope":"runtime"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/document/package-pulseaudio-misc","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/pulseaudio/package-pulseaudio-misc/pulseaudio/UNIHASH/document/package-pulseaudio-misc","https://rdf.openembedded.org/spdx/3.0/link-name":"ccd2a8a2f8a0c22cf3a94fbeda584ab564a1870c197fc6d60d2685c61ad3e741"}],"name":"package-pulseaudio-misc","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc","creationInfo":"_:CreationInfo0","description":"A general purpose sound server intended to run as a middleware between your applications and your hardware devices, either using ALSA or OSS.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ccd2a8a2f8a0c22cf3a94fbeda584ab564a1870c197fc6d60d2685c61ad3e741/pulseaudio/UNIHASH/package/pulseaudio-misc"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:pulseaudio:17.0:*:*:*:*:*:*:*"}],"name":"pulseaudio-misc","summary":"Sound server for Linux and Unix-like operating systems","software_primaryPurpose":"install","software_homePage":"http://www.pulseaudio.org","software_packageVersion":"17.0"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc/file/1","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ccd2a8a2f8a0c22cf3a94fbeda584ab564a1870c197fc6d60d2685c61ad3e741/pulseaudio/UNIHASH/package/pulseaudio-misc/file/1"}],"name":"usr/bin/pacat","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"4b6d5a748e18c977ba028bcf546a9d8b01ef8b34bde178cee053a1591d1fc9d1"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc/file/2","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ccd2a8a2f8a0c22cf3a94fbeda584ab564a1870c197fc6d60d2685c61ad3e741/pulseaudio/UNIHASH/package/pulseaudio-misc/file/2"}],"name":"usr/bin/pacmd","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"7d3415a5a2fca19f335b4e858683396b72732f5e7d14ab808230c36cd70f55f6"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc/file/3","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ccd2a8a2f8a0c22cf3a94fbeda584ab564a1870c197fc6d60d2685c61ad3e741/pulseaudio/UNIHASH/package/pulseaudio-misc/file/3"}],"name":"usr/bin/pasuspender","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"f210d980be50b21d35adce1b2a78474580742217bece90aa09dd300093ca1064"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc/file/4","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ccd2a8a2f8a0c22cf3a94fbeda584ab564a1870c197fc6d60d2685c61ad3e741/pulseaudio/UNIHASH/package/pulseaudio-misc/file/4"}],"name":"usr/bin/pax11publish","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"7f2d6cb809c0784aed2d84b2bcfd047ffbdb23d1d3017554fbef51df40aa4c19"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/relationship/100a6d6637599ea9df347bd6c582f31c","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ccd2a8a2f8a0c22cf3a94fbeda584ab564a1870c197fc6d60d2685c61ad3e741/pulseaudio/UNIHASH/relationship/100a6d6637599ea9df347bd6c582f31c"}],"from":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/809456333525823017adf604b8a773fe1d6e2cc145f1a4cb66d3aaa16b573d52/pulseaudio/UNIHASH/vulnerability/CVE-2024-11586"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/relationship/1b625d30cfc48d7e8faa0e56c22984cf","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ccd2a8a2f8a0c22cf3a94fbeda584ab564a1870c197fc6d60d2685c61ad3e741/pulseaudio/UNIHASH/relationship/1b625d30cfc48d7e8faa0e56c22984cf"}],"from":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc","relationshipType":"contains","to":["http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc/file/1","http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc/file/2","http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc/file/3","http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc/file/4"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/relationship/f60125ef1472dae54c0eb9d34e54874a","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ccd2a8a2f8a0c22cf3a94fbeda584ab564a1870c197fc6d60d2685c61ad3e741/pulseaudio/UNIHASH/relationship/f60125ef1472dae54c0eb9d34e54874a"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/809456333525823017adf604b8a773fe1d6e2cc145f1a4cb66d3aaa16b573d52/pulseaudio/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/relationship/fa50f8fbad2513468b944e3b8f928bf2","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ccd2a8a2f8a0c22cf3a94fbeda584ab564a1870c197fc6d60d2685c61ad3e741/pulseaudio/UNIHASH/relationship/fa50f8fbad2513468b944e3b8f928bf2"}],"from":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/809456333525823017adf604b8a773fe1d6e2cc145f1a4cb66d3aaa16b573d52/pulseaudio/UNIHASH/license/3_27_0/LGPL-2_1-or-later_AND_MIT_AND_BSD-3-Clause"]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/vex-not-affected/1048de81bb150c8403e8ca48018cb65d","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ccd2a8a2f8a0c22cf3a94fbeda584ab564a1870c197fc6d60d2685c61ad3e741/pulseaudio/UNIHASH/vex-not-affected/1048de81bb150c8403e8ca48018cb65d"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/809456333525823017adf604b8a773fe1d6e2cc145f1a4cb66d3aaa16b573d52/pulseaudio/UNIHASH/vulnerability/CVE-2024-11586","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/pulseaudio-083f6e7b-ebbc-555a-aac7-1fa18d85d46a/4601f27226527cf79be4119d4833b6af63330f8a401255a65024a1e093f75890/package/pulseaudio-misc"],"security_vexVersion":"1.0.0","security_impactStatement":"specific to Ubuntu 16.04","security_justificationType":"vulnerableCodeNotPresent"}]}