{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-10-20T18:15:27Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/8f84cb882607384162ed33c1497b8fae5b94e2575d8e9bc1ee6cf42f56ef5155/relationship/bbfb3cb820804e15023131dc934fff1d","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc/nativesdk-qemu/UNIHASH/relationship/bbfb3cb820804e15023131dc934fff1d"}],"from":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/b7b44dbfe490fecf8967f993c3c724d9f6d853b150370bdb231096e8088110d8/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-common"],"scope":"runtime"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/document/package-nativesdk-qemu-system-sh4","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/nativesdk-qemu/package-nativesdk-qemu-system-sh4/nativesdk-qemu/UNIHASH/document/package-nativesdk-qemu-system-sh4","https://rdf.openembedded.org/spdx/3.0/link-name":"c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc"}],"name":"package-nativesdk-qemu-system-sh4","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4","creationInfo":"_:CreationInfo1","description":"QEMU full system emulation binaries(sh4)","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-sh4"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:qemu:10.0.6:*:*:*:*:*:*:*"}],"name":"nativesdk-qemu-system-sh4","summary":"QEMU full system emulation binaries(sh4)","software_primaryPurpose":"install","software_homePage":"http://qemu.org","software_packageVersion":"10.0.6"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4/file/1","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-sh4/file/1"}],"name":"usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-tdxsdk-linux/usr/bin/qemu-system-sh4","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"a2d3b81cdfe2b803e77324377192eba11a851dae295c03e4b546c9394a5c33ea"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/relationship/0b6278a7bab3bb35bdd9e6c72e62e377","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc/nativesdk-qemu/UNIHASH/relationship/0b6278a7bab3bb35bdd9e6c72e62e377"}],"from":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/license/3_27_0/GPL-2_0-only_AND_LGPL-2_1-only"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/relationship/1582e58802a9781d83507141c188299d","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc/nativesdk-qemu/UNIHASH/relationship/1582e58802a9781d83507141c188299d"}],"from":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4","relationshipType":"contains","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4/file/1"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/relationship/e1fc43678ac1e4b776473e928a3c20bc","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc/nativesdk-qemu/UNIHASH/relationship/e1fc43678ac1e4b776473e928a3c20bc"}],"from":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2007-0998","http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2018-18438","http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2023-1386","http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2023-2680"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/relationship/f2e1ed931976a48e6b7a14391987a38d","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc/nativesdk-qemu/UNIHASH/relationship/f2e1ed931976a48e6b7a14391987a38d"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4"],"scope":"build"},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/vex-not-affected/1ccda0f460c4e8c70de5f84a76888307","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc/nativesdk-qemu/UNIHASH/vex-not-affected/1ccda0f460c4e8c70de5f84a76888307"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2018-18438","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4"],"security_vexVersion":"1.0.0","security_impactStatement":"The issues identified by this CVE were determined to not constitute a vulnerability."},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/vex-not-affected/20999336a181b2b67f0e3da02061eee5","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc/nativesdk-qemu/UNIHASH/vex-not-affected/20999336a181b2b67f0e3da02061eee5"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2023-2680","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4"],"security_vexVersion":"1.0.0","security_impactStatement":"RHEL specific issue.","security_justificationType":"vulnerableCodeNotPresent"},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/vex-not-affected/a8e4b2e318b1aa7acc29192dc43cfa37","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc/nativesdk-qemu/UNIHASH/vex-not-affected/a8e4b2e318b1aa7acc29192dc43cfa37"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2023-1386","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4"],"security_vexVersion":"1.0.0","security_impactStatement":"not an issue as per https://bugzilla.redhat.com/show_bug.cgi?id=2223985"},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/vex-not-affected/b785a4f49d91bf056cf3e1f34360d668","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc/nativesdk-qemu/UNIHASH/vex-not-affected/b785a4f49d91bf056cf3e1f34360d668"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2007-0998","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu-system-sh4"],"security_vexVersion":"1.0.0","security_impactStatement":"The VNC server can expose host files uder some circumstances. We don't enable it by default.","security_justificationType":"vulnerableCodeNotPresent"}]}