{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2008-07-05T17:32:48Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/document/package-zip-doc","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/zip/package-zip-doc/zip/UNIHASH/document/package-zip-doc","https://rdf.openembedded.org/spdx/3.0/link-name":"4f1c3f9d2824f2e40dc7f746dca318a1b96cfad37afb75fba74d7455b568d827"}],"name":"package-zip-doc","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc","creationInfo":"_:CreationInfo1","description":"Info-ZIP's purpose is to provide free, portable, high-quality versions of the Zip and UnZip compressor-archiver utilities that are compatible with the DOS-based PKZIP by PKWARE, Inc.  This package contains documentation.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4f1c3f9d2824f2e40dc7f746dca318a1b96cfad37afb75fba74d7455b568d827/zip/UNIHASH/package/zip-doc"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:zip:3.0:*:*:*:*:*:*:*"}],"name":"zip-doc","summary":"Compressor/archiver for creating and modifying .zip files - Documentation files","software_primaryPurpose":"install","software_homePage":"http://www.info-zip.org","software_packageVersion":"3.0"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc/file/1","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4f1c3f9d2824f2e40dc7f746dca318a1b96cfad37afb75fba74d7455b568d827/zip/UNIHASH/package/zip-doc/file/1"}],"name":"usr/share/man/man1/zip.1","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"b8cd4f0980a6a3abd243c00a146bf336564b2bf6c270d1101f541da4d9796623"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc/file/2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4f1c3f9d2824f2e40dc7f746dca318a1b96cfad37afb75fba74d7455b568d827/zip/UNIHASH/package/zip-doc/file/2"}],"name":"usr/share/man/man1/zipcloak.1","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"ed4c767ee3fb9b85eae58c2a437517ac046f03b49607997e0f3f54a19a6d5d43"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc/file/3","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4f1c3f9d2824f2e40dc7f746dca318a1b96cfad37afb75fba74d7455b568d827/zip/UNIHASH/package/zip-doc/file/3"}],"name":"usr/share/man/man1/zipnote.1","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"8a4cfdb9e8696e67d0b7abfc1f93f96b43328b7bbe6b1d5bfbc3426c5c24b7e8"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc/file/4","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4f1c3f9d2824f2e40dc7f746dca318a1b96cfad37afb75fba74d7455b568d827/zip/UNIHASH/package/zip-doc/file/4"}],"name":"usr/share/man/man1/zipsplit.1","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"ea0a59a1d0c6a80f5eda4464aab677f0a73ee13b3494f5fd11e402fe21d950d2"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/relationship/1ce153f8a75c05553b9e9e183bc49400","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4f1c3f9d2824f2e40dc7f746dca318a1b96cfad37afb75fba74d7455b568d827/zip/UNIHASH/relationship/1ce153f8a75c05553b9e9e183bc49400"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4453e59c505a4d025a2baa0c9d7eaad19c8623e5c63d23a5cb93a01d853e6aa5/zip/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/relationship/4c6284d533e13af2b3edafcf92f19f2c","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4f1c3f9d2824f2e40dc7f746dca318a1b96cfad37afb75fba74d7455b568d827/zip/UNIHASH/relationship/4c6284d533e13af2b3edafcf92f19f2c"}],"from":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/4453e59c505a4d025a2baa0c9d7eaad19c8623e5c63d23a5cb93a01d853e6aa5/zip/UNIHASH/license/3_27_0/Info-ZIP"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/relationship/81fe11094226ce18024481c221d5f161","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4f1c3f9d2824f2e40dc7f746dca318a1b96cfad37afb75fba74d7455b568d827/zip/UNIHASH/relationship/81fe11094226ce18024481c221d5f161"}],"from":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc","relationshipType":"contains","to":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc/file/1","http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc/file/2","http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc/file/3","http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc/file/4"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/relationship/d16a7d6c3a97293474654fede60a521c","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4f1c3f9d2824f2e40dc7f746dca318a1b96cfad37afb75fba74d7455b568d827/zip/UNIHASH/relationship/d16a7d6c3a97293474654fede60a521c"}],"from":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/4453e59c505a4d025a2baa0c9d7eaad19c8623e5c63d23a5cb93a01d853e6aa5/zip/UNIHASH/vulnerability/CVE-2018-13410","http://spdxdocs.org/openembedded-alias/by-doc-hash/4453e59c505a4d025a2baa0c9d7eaad19c8623e5c63d23a5cb93a01d853e6aa5/zip/UNIHASH/vulnerability/CVE-2018-13684"]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/vex-not-affected/18cd4512f25d293888fb8b88c730ce9a","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4f1c3f9d2824f2e40dc7f746dca318a1b96cfad37afb75fba74d7455b568d827/zip/UNIHASH/vex-not-affected/18cd4512f25d293888fb8b88c730ce9a"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4453e59c505a4d025a2baa0c9d7eaad19c8623e5c63d23a5cb93a01d853e6aa5/zip/UNIHASH/vulnerability/CVE-2018-13410","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc"],"security_vexVersion":"1.0.0","security_impactStatement":"Disputed and also Debian doesn't consider a vulnerability"},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/vex-not-affected/bdaef6bb8005afeabfb6e47a6a0b1377","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4f1c3f9d2824f2e40dc7f746dca318a1b96cfad37afb75fba74d7455b568d827/zip/UNIHASH/vex-not-affected/bdaef6bb8005afeabfb6e47a6a0b1377"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4453e59c505a4d025a2baa0c9d7eaad19c8623e5c63d23a5cb93a01d853e6aa5/zip/UNIHASH/vulnerability/CVE-2018-13684","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-doc"],"security_vexVersion":"1.0.0","security_impactStatement":"Not for zip but for smart contract implementation for it"}]}