{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-10-20T18:15:27Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/8f84cb882607384162ed33c1497b8fae5b94e2575d8e9bc1ee6cf42f56ef5155/relationship/dd91e31181d3a66ca735c0beaa37e6d2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0e81f06681a78f6c235812e52e301eb292a9e808cecfdd6fb5a3941ab2a1429f/nativesdk-qemu/UNIHASH/relationship/dd91e31181d3a66ca735c0beaa37e6d2"}],"from":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0813794a91e3c9942aee877e6ad199cee1c0e37c32de53aa3cc6086c690d9558/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-vmsr-helper","http://spdxdocs.org/openembedded-alias/by-doc-hash/35a75611c23bf8ff800a3329571f499b3bfdbc41a350147ff6d02ac4981ada0d/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-x86-64","http://spdxdocs.org/openembedded-alias/by-doc-hash/5bf17020c52303defad62ad41be6b69a71067e627fd26011252bf168de39ef9c/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-mipsel","http://spdxdocs.org/openembedded-alias/by-doc-hash/9fd977aecaa7b4982daeaaf7f43e965e46eddcd61393afe7a6887b863e088724/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-mipsel","http://spdxdocs.org/openembedded-alias/by-doc-hash/b7b44dbfe490fecf8967f993c3c724d9f6d853b150370bdb231096e8088110d8/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-common","http://spdxdocs.org/openembedded-alias/by-doc-hash/72f0f44bc148da02e8d236cd12fbfd010d10565024650f796360a4b45612338e/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-ppc","http://spdxdocs.org/openembedded-alias/by-doc-hash/6e118d69a89dadc5668cfcf073f47db7fe1824b8e92a71cd5e887f83e8e3a76e/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-ppc64","http://spdxdocs.org/openembedded-alias/by-doc-hash/d9fd40f5b178ec6a65f698b00ed14bcff76c965710a6a5e00dd0ef112a7f7510/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-ppc64le","http://spdxdocs.org/openembedded-alias/by-doc-hash/1b6db9c17591896dda7ac553f9f3fd946a3b604403c8639e039a910c0b68f1e6/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-riscv64","http://spdxdocs.org/openembedded-alias/by-doc-hash/2d44e3d30a55383fb18f0b89547e5bd58bcf1c754b61cb50925b2f54a9575b48/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-sh4","http://spdxdocs.org/openembedded-alias/by-doc-hash/034d8d4eb09f0ad28f418a64f72ca0ff34b8e6864679a77841356ef2b8269304/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-x86-64","http://spdxdocs.org/openembedded-alias/by-doc-hash/d513faf6bc98d50b45354738e20b9f95007feeeaae2622206befebc08d7819e4/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-riscv32","http://spdxdocs.org/openembedded-alias/by-doc-hash/7e73792722e90df9c67a8a36478e64f34dc308143203d86444e86895505bc4e5/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-loongarch64","http://spdxdocs.org/openembedded-alias/by-doc-hash/ff7fc62418c9e458b94bc85cbc48efb9bd8c30a285d6bc27b8da6337cdd7abd1/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-mips","http://spdxdocs.org/openembedded-alias/by-doc-hash/bb1db70cc52740186503404ccd4d1a19a9ede5e3a7dc98652bfa57455c704e22/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-loongarch64","http://spdxdocs.org/openembedded-alias/by-doc-hash/9987a9df3e4cf62e69e3a78cc18679490b3ab3d3bbe48522176c8b51d8a8deb4/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-mips","http://spdxdocs.org/openembedded-alias/by-doc-hash/dc29e2ba8045be83a512d8dd7dbf50e7071dced1307b5fa39b096a42a2549b6c/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-ppc","http://spdxdocs.org/openembedded-alias/by-doc-hash/c408d81b918642dd28ba7af52a8d5090eb2ddb555754abf112e465ed6d8f4dfc/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-sh4","http://spdxdocs.org/openembedded-alias/by-doc-hash/9988dd558651d6e70796374f880153252a17fe2f74f1e302c95b47bd88223397/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-arm","http://spdxdocs.org/openembedded-alias/by-doc-hash/8e769b2a8151cc4936cf86f2a8cbd9e793c95a22044c3fd80da5b3159d9f1a6b/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-ppc64","http://spdxdocs.org/openembedded-alias/by-doc-hash/fc334cf988b70b572531b4d3d933f06f32aa2931f1be47c5e32f4a326d6aee2d/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-aarch64","http://spdxdocs.org/openembedded-alias/by-doc-hash/845096d43e54681312685cc30b32c10a68050424be40afdaad02cb5a57d75d58/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-riscv32","http://spdxdocs.org/openembedded-alias/by-doc-hash/1a0cbca313346048ec12b2c9ad5c35f44ee6401271c863bb5acba04e6ec4b37a/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-mips64","http://spdxdocs.org/openembedded-alias/by-doc-hash/66109dcc696ecb33797179d393617385f01e8f73e8b01a2c73c36ae52e136d1a/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-mips64","http://spdxdocs.org/openembedded-alias/by-doc-hash/0dc007844c32ee61a418134f578bafddf0411fc8c6ed8a8801370c13423202b0/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-mips64el","http://spdxdocs.org/openembedded-alias/by-doc-hash/7f3ed445126443db79e8e86d8258900c3ec182c7655f1226dba74fb4cf93f036/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-i386","http://spdxdocs.org/openembedded-alias/by-doc-hash/3712925bfee3c8ad2643b09099f0f088f6467917e5a88beaa8ff04db0b7acfab/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-arm","http://spdxdocs.org/openembedded-alias/by-doc-hash/95fde648ed724c26cc832e53f308b3a641a30386f4d2caa70c8d2348843f0d5c/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-aarch64","http://spdxdocs.org/openembedded-alias/by-doc-hash/26ff7df4782b2eae6fb14be0fad25e5da274099a7fc43eef8a83d7f32946ed0d/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-user-i386","http://spdxdocs.org/openembedded-alias/by-doc-hash/72df5c5c991759ec0f03874b7ad8d39dfff51b6879ddca8e68a767e4ee7b8533/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-riscv64","http://spdxdocs.org/openembedded-alias/by-doc-hash/0d057308fcdda0dd60d98521610d73459d9a0d3bbc1edb3e0f5f4b5ab4ac0d68/nativesdk-qemu/UNIHASH/package/nativesdk-qemu-system-mips64el"],"scope":"runtime"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/document/package-nativesdk-qemu","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/nativesdk-qemu/package-nativesdk-qemu/nativesdk-qemu/UNIHASH/document/package-nativesdk-qemu","https://rdf.openembedded.org/spdx/3.0/link-name":"0e81f06681a78f6c235812e52e301eb292a9e808cecfdd6fb5a3941ab2a1429f"}],"name":"package-nativesdk-qemu","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu","creationInfo":"_:CreationInfo1","description":"QEMU is a hosted virtual machine monitor: it emulates the machine's processor through dynamic binary translation and provides a set of different hardware and device models for the machine, enabling it to run a variety of guest operating systems","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0e81f06681a78f6c235812e52e301eb292a9e808cecfdd6fb5a3941ab2a1429f/nativesdk-qemu/UNIHASH/package/nativesdk-qemu"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:qemu:10.0.6:*:*:*:*:*:*:*"}],"name":"nativesdk-qemu","summary":"Fast open source processor emulator","software_primaryPurpose":"install","software_homePage":"http://qemu.org","software_packageVersion":"10.0.6"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/relationship/056a4bfdf188f305cd4e01d98201a345","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0e81f06681a78f6c235812e52e301eb292a9e808cecfdd6fb5a3941ab2a1429f/nativesdk-qemu/UNIHASH/relationship/056a4bfdf188f305cd4e01d98201a345"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/relationship/131e27aedc7a5f9d30a2991e0c9b4dac","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0e81f06681a78f6c235812e52e301eb292a9e808cecfdd6fb5a3941ab2a1429f/nativesdk-qemu/UNIHASH/relationship/131e27aedc7a5f9d30a2991e0c9b4dac"}],"from":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/license/3_27_0/GPL-2_0-only_AND_LGPL-2_1-only"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/relationship/83a953428a284f76324272f3a4e0b85d","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0e81f06681a78f6c235812e52e301eb292a9e808cecfdd6fb5a3941ab2a1429f/nativesdk-qemu/UNIHASH/relationship/83a953428a284f76324272f3a4e0b85d"}],"from":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2007-0998","http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2018-18438","http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2023-1386","http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2023-2680"]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/vex-not-affected/3618f6175410cc8e7b74ed66d5d55438","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0e81f06681a78f6c235812e52e301eb292a9e808cecfdd6fb5a3941ab2a1429f/nativesdk-qemu/UNIHASH/vex-not-affected/3618f6175410cc8e7b74ed66d5d55438"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2023-2680","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu"],"security_vexVersion":"1.0.0","security_impactStatement":"RHEL specific issue.","security_justificationType":"vulnerableCodeNotPresent"},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/vex-not-affected/50b78f1045a69acd12e03d04f12f4b3f","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0e81f06681a78f6c235812e52e301eb292a9e808cecfdd6fb5a3941ab2a1429f/nativesdk-qemu/UNIHASH/vex-not-affected/50b78f1045a69acd12e03d04f12f4b3f"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2018-18438","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu"],"security_vexVersion":"1.0.0","security_impactStatement":"The issues identified by this CVE were determined to not constitute a vulnerability."},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/vex-not-affected/e54126346f44ae5c7f1315617bd658f3","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0e81f06681a78f6c235812e52e301eb292a9e808cecfdd6fb5a3941ab2a1429f/nativesdk-qemu/UNIHASH/vex-not-affected/e54126346f44ae5c7f1315617bd658f3"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2007-0998","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu"],"security_vexVersion":"1.0.0","security_impactStatement":"The VNC server can expose host files uder some circumstances. We don't enable it by default.","security_justificationType":"vulnerableCodeNotPresent"},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/vex-not-affected/f5e231ba0d61a5193a4c381bdc9d35f5","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0e81f06681a78f6c235812e52e301eb292a9e808cecfdd6fb5a3941ab2a1429f/nativesdk-qemu/UNIHASH/vex-not-affected/f5e231ba0d61a5193a4c381bdc9d35f5"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0ebbcb18868e98ac21f4d126ee0c18224a419eb99d3824a83343b00be36689e2/nativesdk-qemu/UNIHASH/vulnerability/CVE-2023-1386","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-qemu-73b50db1-68d9-511b-b396-0360258e2016/cbbbd362096706b85f042745ab16952d6381004d04e8ab847e7271caf06a0842/package/nativesdk-qemu"],"security_vexVersion":"1.0.0","security_impactStatement":"not an issue as per https://bugzilla.redhat.com/show_bug.cgi?id=2223985"}]}