{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2008-07-05T17:32:48Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/document/package-zip-dbg","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/zip/package-zip-dbg/zip/UNIHASH/document/package-zip-dbg"}],"name":"package-zip-dbg","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg","creationInfo":"_:CreationInfo0","description":"Info-ZIP's purpose is to provide free, portable, high-quality versions of the Zip and UnZip compressor-archiver utilities that are compatible with the DOS-based PKZIP by PKWARE, Inc.  This package contains ELF symbols and related sources for debugging purposes.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/d30a470dd15d172651d458df5583473bdd74ad60950b067e2c792a9b78452608/zip/UNIHASH/package/zip-dbg"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:zip:3.0:*:*:*:*:*:*:*"}],"name":"zip-dbg","summary":"Compressor/archiver for creating and modifying .zip files - Debugging files","software_primaryPurpose":"install","software_homePage":"http://www.info-zip.org","software_packageVersion":"3.0"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg/file/1","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/d30a470dd15d172651d458df5583473bdd74ad60950b067e2c792a9b78452608/zip/UNIHASH/package/zip-dbg/file/1"}],"name":"usr/bin/.debug/zip","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"0890f191682513bed5e69dda58be5c2aaac5bc3c24f3bda69a71829929713703"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg/file/2","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/d30a470dd15d172651d458df5583473bdd74ad60950b067e2c792a9b78452608/zip/UNIHASH/package/zip-dbg/file/2"}],"name":"usr/bin/.debug/zipcloak","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"1c5c901fe8485750dffd0593a3129033abba1a88d858dff546f45ab0107a318c"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg/file/3","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/d30a470dd15d172651d458df5583473bdd74ad60950b067e2c792a9b78452608/zip/UNIHASH/package/zip-dbg/file/3"}],"name":"usr/bin/.debug/zipnote","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"5c71b36397fe1205b1b86009e5048ffe8c38257bbdf0f14509eb15fc6165cf80"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg/file/4","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/d30a470dd15d172651d458df5583473bdd74ad60950b067e2c792a9b78452608/zip/UNIHASH/package/zip-dbg/file/4"}],"name":"usr/bin/.debug/zipsplit","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"8c3c9463cc99121d228d8e5590efff56cf49486cb0db8c7a16d113d18108fcf0"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/relationship/2e7e0ecb265df44ce085fa064dc0534c","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/d30a470dd15d172651d458df5583473bdd74ad60950b067e2c792a9b78452608/zip/UNIHASH/relationship/2e7e0ecb265df44ce085fa064dc0534c"}],"from":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/4453e59c505a4d025a2baa0c9d7eaad19c8623e5c63d23a5cb93a01d853e6aa5/zip/UNIHASH/vulnerability/CVE-2018-13410","http://spdxdocs.org/openembedded-alias/by-doc-hash/4453e59c505a4d025a2baa0c9d7eaad19c8623e5c63d23a5cb93a01d853e6aa5/zip/UNIHASH/vulnerability/CVE-2018-13684"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/relationship/9eccfc5cc0f484def8c7f9293a6cf479","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/d30a470dd15d172651d458df5583473bdd74ad60950b067e2c792a9b78452608/zip/UNIHASH/relationship/9eccfc5cc0f484def8c7f9293a6cf479"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4453e59c505a4d025a2baa0c9d7eaad19c8623e5c63d23a5cb93a01d853e6aa5/zip/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/relationship/9f20027fac1b50cc7ddb378ebf02c37e","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/d30a470dd15d172651d458df5583473bdd74ad60950b067e2c792a9b78452608/zip/UNIHASH/relationship/9f20027fac1b50cc7ddb378ebf02c37e"}],"from":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/4453e59c505a4d025a2baa0c9d7eaad19c8623e5c63d23a5cb93a01d853e6aa5/zip/UNIHASH/license/3_27_0/Info-ZIP"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/relationship/ceed792c5fe76551fc0911d03b295502","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/d30a470dd15d172651d458df5583473bdd74ad60950b067e2c792a9b78452608/zip/UNIHASH/relationship/ceed792c5fe76551fc0911d03b295502"}],"from":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg","relationshipType":"contains","to":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg/file/1","http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg/file/2","http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg/file/3","http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg/file/4"]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/vex-not-affected/0039a409a110e8f4e2ccf65cd914744b","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/d30a470dd15d172651d458df5583473bdd74ad60950b067e2c792a9b78452608/zip/UNIHASH/vex-not-affected/0039a409a110e8f4e2ccf65cd914744b"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4453e59c505a4d025a2baa0c9d7eaad19c8623e5c63d23a5cb93a01d853e6aa5/zip/UNIHASH/vulnerability/CVE-2018-13684","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg"],"security_vexVersion":"1.0.0","security_impactStatement":"Not for zip but for smart contract implementation for it"},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/vex-not-affected/fec2b7a3867357cbc31ce5b14215a56a","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/d30a470dd15d172651d458df5583473bdd74ad60950b067e2c792a9b78452608/zip/UNIHASH/vex-not-affected/fec2b7a3867357cbc31ce5b14215a56a"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4453e59c505a4d025a2baa0c9d7eaad19c8623e5c63d23a5cb93a01d853e6aa5/zip/UNIHASH/vulnerability/CVE-2018-13410","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/17faf6511b491886f29a23d3f2327888196359e73fa95c3f4b6973136413bc1a/package/zip-dbg"],"security_vexVersion":"1.0.0","security_impactStatement":"Disputed and also Debian doesn't consider a vulnerability"}]}