{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-09-18T18:43:13Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/document/package-bluez5-obex","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/bluez5/package-bluez5-obex/bluez5/UNIHASH/document/package-bluez5-obex"}],"name":"package-bluez5-obex","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex","creationInfo":"_:CreationInfo1","description":"Linux Bluetooth stack V5 userland components.  These include a system configurations, daemons, tools and system libraries.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e34ab043552a4a4b83d8db436f9c779cc9783572faacb4feebc55ceb6acb8c19/bluez5/UNIHASH/package/bluez5-obex"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:bluez:5.84:*:*:*:*:*:*:*"}],"name":"bluez5-obex","summary":"Linux Bluetooth Stack Userland V5","software_primaryPurpose":"install","software_homePage":"http://www.bluez.org","software_packageVersion":"5.84"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex/file/1","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e34ab043552a4a4b83d8db436f9c779cc9783572faacb4feebc55ceb6acb8c19/bluez5/UNIHASH/package/bluez5-obex/file/1"}],"name":"usr/lib/systemd/user/obex.service","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"6f7b737a345f28c1e4b4e76a3738b3ac5fb4da8493315d29c32ebca45fc76335"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex/file/2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e34ab043552a4a4b83d8db436f9c779cc9783572faacb4feebc55ceb6acb8c19/bluez5/UNIHASH/package/bluez5-obex/file/2"}],"name":"usr/libexec/bluetooth/obexd","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"f1985d1f55078156fcedc54b07846fd595841f6444e3c68613fa0f1e5d553b5b"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex/file/3","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e34ab043552a4a4b83d8db436f9c779cc9783572faacb4feebc55ceb6acb8c19/bluez5/UNIHASH/package/bluez5-obex/file/3"}],"name":"usr/share/dbus-1/services/org.bluez.obex.service","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"d5cad9262844f332c2c067fb4d83c41b3b170d93247d624c3737d915b079fd74"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/relationship/0e8ae749babb12849d8966c0468c1e0e","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e34ab043552a4a4b83d8db436f9c779cc9783572faacb4feebc55ceb6acb8c19/bluez5/UNIHASH/relationship/0e8ae749babb12849d8966c0468c1e0e"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/91aaf71a1e217fd50a6efef57af29f537d165d367a398fc19f489ba33293d9da/bluez5/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/relationship/10e64622f5c6b4437d8d91dc939e0d3c","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e34ab043552a4a4b83d8db436f9c779cc9783572faacb4feebc55ceb6acb8c19/bluez5/UNIHASH/relationship/10e64622f5c6b4437d8d91dc939e0d3c"}],"from":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex","relationshipType":"contains","to":["http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex/file/1","http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex/file/2","http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex/file/3"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/relationship/1288889dc4314b36bf182eb0496962e3","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e34ab043552a4a4b83d8db436f9c779cc9783572faacb4feebc55ceb6acb8c19/bluez5/UNIHASH/relationship/1288889dc4314b36bf182eb0496962e3"}],"from":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/91aaf71a1e217fd50a6efef57af29f537d165d367a398fc19f489ba33293d9da/bluez5/UNIHASH/license/3_27_0/GPL-2_0-or-later_AND_LGPL-2_1-or-later"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/relationship/750c11a6455df3ddd118761163ce0ff2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e34ab043552a4a4b83d8db436f9c779cc9783572faacb4feebc55ceb6acb8c19/bluez5/UNIHASH/relationship/750c11a6455df3ddd118761163ce0ff2"}],"from":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/91aaf71a1e217fd50a6efef57af29f537d165d367a398fc19f489ba33293d9da/bluez5/UNIHASH/vulnerability/CVE-2020-24490"]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/vex-not-affected/1ae0355a13e0f6eb6425501ab9ed331c","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e34ab043552a4a4b83d8db436f9c779cc9783572faacb4feebc55ceb6acb8c19/bluez5/UNIHASH/vex-not-affected/1ae0355a13e0f6eb6425501ab9ed331c"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/91aaf71a1e217fd50a6efef57af29f537d165d367a398fc19f489ba33293d9da/bluez5/UNIHASH/vulnerability/CVE-2020-24490","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/bluez5-ed390ea1-f514-59c3-a215-ef66c4b51739/8b4ead655fb00127b69d1bec5a30233f73232d5b86a5da8bec5a332cd92ab4bc/package/bluez5-obex"],"security_vexVersion":"1.0.0","security_impactStatement":"This issue has kernel fixes rather than bluez fixes"}]}