{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-05-07T14:30:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/76119cb55a207576df3d1056990bd473e9407dacadf304334cd8381766fdbeb7/relationship/807e7b46242681bed3e24f77bbfe6782","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/relationship/807e7b46242681bed3e24f77bbfe6782"}],"from":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/97f5420dc912cd9d05b40527aa3851b28a3d4414f2050731d9ceb0239dd150c6/libpam/UNIHASH/package/pam-plugin-permit","http://spdxdocs.org/openembedded-alias/by-doc-hash/23f12e0e71c043ef4b46f0b1e08d1e027789a52c515d60206746bd4bf61cd637/libpam/UNIHASH/package/libpam","http://spdxdocs.org/openembedded-alias/by-doc-hash/e82ab53f26ce431e1456645abed1e6cae9855246a6b73161986028dfffbbc540/libpam/UNIHASH/package/libpam-runtime","http://spdxdocs.org/openembedded-alias/by-doc-hash/52d15a266108ce5395adad6264eca1803fffc70cf0acbe28b031f27b6423266c/libpam/UNIHASH/package/pam-plugin-unix","http://spdxdocs.org/openembedded-alias/by-doc-hash/6c4a06214c4c967fce01a12caae734d7d966f8aece8ea35474f5ba4a5cfbf42b/libpam/UNIHASH/package/pam-plugin-deny"],"scope":"runtime"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/document/package-dropbear","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/dropbear/package-dropbear/dropbear/UNIHASH/document/package-dropbear","https://rdf.openembedded.org/spdx/3.0/link-name":"968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1"}],"name":"package-dropbear","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear","creationInfo":"_:CreationInfo1","description":"Dropbear is a relatively small SSH server and client. It runs on a variety of POSIX-based platforms. Dropbear is open source software, distributed under a MIT-style license. Dropbear is particularly useful for \"embedded\"-type Linux (or other Unix) systems, such as wireless routers.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/package/dropbear"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:dropbear_ssh:2025.88:*:*:*:*:*:*:*"}],"name":"dropbear","summary":"A lightweight SSH and SCP implementation","software_primaryPurpose":"install","software_homePage":"http://matt.ucc.asn.au/dropbear/dropbear.html","software_packageVersion":"2025.88"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/1","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/package/dropbear/file/1"}],"name":"etc/default/dropbear","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"051d8f4da06dee5e2ed9f0fc4fbed14b40e51eb2d08b6e7980c977d357a56aa9"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/package/dropbear/file/2"}],"name":"etc/pam.d/dropbear","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"e717d6998b36492e9bacca7a3ef16720992a0e2e808fe4564813a6cf9885fc2a"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/3","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/package/dropbear/file/3"}],"name":"usr/lib/systemd/system/dropbear.socket","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"3738145236d71b572c4e62f1b7e3a4480c4fa6c06a2ae283e8bc9e50cbd584c7"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/4","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/package/dropbear/file/4"}],"name":"usr/lib/systemd/system/dropbear@.service","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"cdcb0542084fd72bb6392e35eba47fe2781e4246de7f0f3e29462925e4b21eee"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/5","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/package/dropbear/file/5"}],"name":"usr/lib/systemd/system/dropbearkey.service","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"45f4c35bd182abbcd3e5addc84df297ece21a92e8594c0bd83b4d14eb6a95132"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/6","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/package/dropbear/file/6"}],"name":"usr/lib/systemd/system-preset/98-dropbear.preset","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"f56ecaadc5424d89b48e2510164d19c28c28db48443724fe030b3c89370d2dd9"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/7","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/package/dropbear/file/7"}],"name":"usr/sbin/dropbearmulti","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"42b231862f53bc867803ee75773f19329914fb01a09960f1469d40c8abd24b46"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/relationship/4330aa61c5b2a9dd23999704f08335ce","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/relationship/4330aa61c5b2a9dd23999704f08335ce"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/9e00dfc96cabf7e05894d4b775e50ce907cb937ea681383278e7151d9d51082b/dropbear/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/relationship/741e1acef644b58fe6726297e09a2623","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/relationship/741e1acef644b58fe6726297e09a2623"}],"from":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear","relationshipType":"contains","to":["http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/1","http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/2","http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/3","http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/4","http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/5","http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/6","http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear/file/7"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/relationship/74447635ede45692510add1aa9a12787","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/relationship/74447635ede45692510add1aa9a12787"}],"from":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/9e00dfc96cabf7e05894d4b775e50ce907cb937ea681383278e7151d9d51082b/dropbear/UNIHASH/vulnerability/CVE-2019-6111","http://spdxdocs.org/openembedded-alias/by-doc-hash/9e00dfc96cabf7e05894d4b775e50ce907cb937ea681383278e7151d9d51082b/dropbear/UNIHASH/vulnerability/CVE-2025-14282"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/relationship/ba58fe1c04e41e5237caf84dd04b1d77","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/relationship/ba58fe1c04e41e5237caf84dd04b1d77"}],"from":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/9e00dfc96cabf7e05894d4b775e50ce907cb937ea681383278e7151d9d51082b/dropbear/UNIHASH/license/3_27_0/MIT_AND_BSD-3-Clause_AND_BSD-2-Clause_AND_LicenseRef-PD/dfb0e71582a67a99fc7ceb67208d8343"]},{"type":"security_VexFixedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/vex-fixed/2944e3f1529539747f1813dda6322255","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/vex-fixed/2944e3f1529539747f1813dda6322255"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/9e00dfc96cabf7e05894d4b775e50ce907cb937ea681383278e7151d9d51082b/dropbear/UNIHASH/vulnerability/CVE-2019-6111","relationshipType":"fixedIn","to":["http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear"],"security_vexVersion":"1.0.0"},{"type":"security_VexFixedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/vex-fixed/66069e657b39dfc2ecd506ea2d4c0ec7","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/968d4707dcdfc5558f848166298d5fe537f228d168e895f80d581194aee719c1/dropbear/UNIHASH/vex-fixed/66069e657b39dfc2ecd506ea2d4c0ec7"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/9e00dfc96cabf7e05894d4b775e50ce907cb937ea681383278e7151d9d51082b/dropbear/UNIHASH/vulnerability/CVE-2025-14282","relationshipType":"fixedIn","to":["http://spdx.org/spdxdocs/dropbear-a5fe322f-8d48-534e-82c1-d7104cc2e326/b14cbf31afc986a227bc40cf4483bd22474033131eab8a879bb5aae26e4163a7/package/dropbear"],"security_vexVersion":"1.0.0"}]}