{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2025-10-20T18:15:27Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/document/package-nativesdk-qemu-guest-agent","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/nativesdk-qemu/package-nativesdk-qemu-guest-agent/nativesdk-qemu/UNIHASH/document/package-nativesdk-qemu-guest-agent","https://rdf.openembedded.org/spdx/3.0/link-name":"16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92"}],"name":"package-nativesdk-qemu-guest-agent","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent","creationInfo":"_:CreationInfo0","description":"QEMU is a hosted virtual machine monitor: it emulates the machine's processor through dynamic binary translation and provides a set of different hardware and device models for the machine, enabling it to run a variety of guest operating systems","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-guest-agent"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:qemu:10.0.6:*:*:*:*:*:*:*"}],"name":"nativesdk-qemu-guest-agent","summary":"QEMU guest agent","software_primaryPurpose":"install","software_homePage":"http://qemu.org","software_packageVersion":"10.0.6"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent/file/1","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-guest-agent/file/1"}],"name":"usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-tdxsdk-linux/etc/init.d/qemu-guest-agent","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"ff632bbb362d29a9b83990ff49e4f20e4330a07147bd7e73a2c3b757e7c2310f"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent/file/2","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-guest-agent/file/2"}],"name":"usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-tdxsdk-linux/etc/udev/rules.d/60-qemu-guest-agent.rules","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"c25178c4315fddc557245f023464c6cd8d7325c9ec8f79db292db20d082a4c7a"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent/file/3","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-guest-agent/file/3"}],"name":"usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-tdxsdk-linux/usr/bin/qemu-ga","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"9439d5713e73987b643f0eb577abd91ca541e97bf8e6abf4e6118f8d2e1beb35"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/relationship/28c7265bb03b2783c1a15867fdd8ac72","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92/nativesdk-qemu/UNIHASH/relationship/28c7265bb03b2783c1a15867fdd8ac72"}],"from":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/license/3_27_0/GPL-2_0-only_AND_LGPL-2_1-only"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/relationship/2c39732afc85d3a25208a542d312a143","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92/nativesdk-qemu/UNIHASH/relationship/2c39732afc85d3a25208a542d312a143"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/relationship/3e224d9c5ba8c0506f376038618c85f6","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92/nativesdk-qemu/UNIHASH/relationship/3e224d9c5ba8c0506f376038618c85f6"}],"from":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent","relationshipType":"contains","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent/file/1","http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent/file/2","http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent/file/3"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/relationship/deb50eeaceca2bb755c35b1484b9e8b4","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92/nativesdk-qemu/UNIHASH/relationship/deb50eeaceca2bb755c35b1484b9e8b4"}],"from":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2007-0998","http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2018-18438","http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2023-1386","http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2023-2680"]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/vex-not-affected/06902c43ee1a581029b33b26d5b85c1e","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92/nativesdk-qemu/UNIHASH/vex-not-affected/06902c43ee1a581029b33b26d5b85c1e"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2023-2680","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent"],"security_vexVersion":"1.0.0","security_impactStatement":"RHEL specific issue.","security_justificationType":"vulnerableCodeNotPresent"},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/vex-not-affected/1306a66ac4aa3ad74c4852ab58f9838a","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92/nativesdk-qemu/UNIHASH/vex-not-affected/1306a66ac4aa3ad74c4852ab58f9838a"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2007-0998","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent"],"security_vexVersion":"1.0.0","security_impactStatement":"The VNC server can expose host files uder some circumstances. We don't enable it by default.","security_justificationType":"vulnerableCodeNotPresent"},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/vex-not-affected/7968826270fbb610df50493f521d5e3e","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92/nativesdk-qemu/UNIHASH/vex-not-affected/7968826270fbb610df50493f521d5e3e"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2018-18438","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent"],"security_vexVersion":"1.0.0","security_impactStatement":"The issues identified by this CVE were determined to not constitute a vulnerability."},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/vex-not-affected/7f00be0941eb8ffe1adadb708fd04618","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/16854ab371f39dc024ea619d6ce13f05ffc48ceb9fb147ec6b5cf3c4d0523a92/nativesdk-qemu/UNIHASH/vex-not-affected/7f00be0941eb8ffe1adadb708fd04618"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2023-1386","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-guest-agent"],"security_vexVersion":"1.0.0","security_impactStatement":"not an issue as per https://bugzilla.redhat.com/show_bug.cgi?id=2223985"}]}