{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2025-06-24T20:32:27Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/5f4a3c5bda477641d98c6c806d349d8b0aa8da0b833cfc9615b2449a38b2d3a0/relationship/c71e0450d92f6d19ee08c5fcd396cbe6","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/relationship/c71e0450d92f6d19ee08c5fcd396cbe6"}],"from":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/23f12e0e71c043ef4b46f0b1e08d1e027789a52c515d60206746bd4bf61cd637/libpam/UNIHASH/package/libpam"],"scope":"runtime"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/document/package-shadow-base","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/shadow/package-shadow-base/shadow/UNIHASH/document/package-shadow-base","https://rdf.openembedded.org/spdx/3.0/link-name":"b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e"}],"name":"package-shadow-base","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base","creationInfo":"_:CreationInfo0","description":"Tools to change and administer password and group data","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/package/shadow-base"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:shadow:4.18.0:*:*:*:*:*:*:*"}],"name":"shadow-base","summary":"Tools to change and administer password and group data","software_primaryPurpose":"install","software_homePage":"http://github.com/shadow-maint/shadow","software_packageVersion":"4.18.0"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base/file/1","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/package/shadow-base/file/1"}],"name":"etc/login.defs","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"3e287167dc9811d21abf7dfec3f31b4317cfd5ba1d5aefd82a6621be003c9e5d"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base/file/2","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/package/shadow-base/file/2"}],"name":"etc/pam.d/login","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"e0d2e9f5a1e54c7dca8524b952e00767e934b6f6d63e13c92b292cae3257526b"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base/file/3","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/package/shadow-base/file/3"}],"name":"etc/pam.d/su","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"9859ea814ba0558c0236007dca31743863bfaa68922a7d509f89a86c1dafab10"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base/file/4","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/package/shadow-base/file/4"}],"name":"usr/bin/login.shadow","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"1779e51d53887d9c088a514622a0207dd29df6d1925b6b5466bca0704e64cb80"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base/file/5","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/package/shadow-base/file/5"}],"name":"usr/bin/newgrp.shadow","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"1253210700454d829f8da18e5a411a898f011b9b290b15c7d9c1b0fe295fa870"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base/file/6","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/package/shadow-base/file/6"}],"name":"usr/bin/su.shadow","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"3031567b3fa31291e9e73e93b8c44cff952ac4c012090e16d064f28bf5de0f10"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/relationship/2676f6fa2587e22fffbc0943a82851cc","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/relationship/2676f6fa2587e22fffbc0943a82851cc"}],"from":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/cc72db638e3f8e283e722af0ecc77d19f93cc6736700ee76477e3773b6b07b05/shadow/UNIHASH/vulnerability/CVE-2013-4235"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/relationship/48de2044dfd723fc8686469376a545b1","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/relationship/48de2044dfd723fc8686469376a545b1"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc72db638e3f8e283e722af0ecc77d19f93cc6736700ee76477e3773b6b07b05/shadow/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/relationship/8f3adbd76d2c8d7bf3c2dcd184c737d0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/relationship/8f3adbd76d2c8d7bf3c2dcd184c737d0"}],"from":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base","relationshipType":"contains","to":["http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base/file/1","http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base/file/2","http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base/file/3","http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base/file/4","http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base/file/5","http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base/file/6"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/relationship/ebc250c54c4522ca9574beff170d0241","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/relationship/ebc250c54c4522ca9574beff170d0241"}],"from":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/cc72db638e3f8e283e722af0ecc77d19f93cc6736700ee76477e3773b6b07b05/shadow/UNIHASH/license/3_27_0/BSD-3-Clause"]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/vex-not-affected/23e5cb12ba82b87ac82a15d5a98c7d4a","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/b894572baec27ea6a4f1f3e06e94c2123442a1881a47f8520c175255c27ed79e/shadow/UNIHASH/vex-not-affected/23e5cb12ba82b87ac82a15d5a98c7d4a"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc72db638e3f8e283e722af0ecc77d19f93cc6736700ee76477e3773b6b07b05/shadow/UNIHASH/vulnerability/CVE-2013-4235","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/shadow-10e66933-65cf-5a2d-9a1d-99b12a405441/f355bc089516c096cdd2f3a9e5f434e3df30585b6954c1216110610a7535ba7d/package/shadow-base"],"security_vexVersion":"1.0.0","security_impactStatement":"Severity is low and marked as closed and won't fix."}]}