{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/document/static-zip","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/recipe/zip"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/zip/static-zip/zip/UNIHASH/document/static-zip","https://rdf.openembedded.org/spdx/3.0/link-name":"62612a5e32dcd63ac1eb74fb6302ccbac39abacf8d209ada4d80e676aa0a6c65"}],"name":"static-zip"},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/recipe/zip","software_homePage":"http://www.info-zip.org","software_packageUrl":"pkg:yocto/core/zip@3.0","software_packageVersion":"3.0","software_sourceInfo":"{\"FILENAME\":\"zip_3.0.bb\",\"FILE_LAYERNAME\":\"core\"}","software_primaryPurpose":"specification","creationInfo":"_:CreationInfo1","description":"Info-ZIP's purpose is to provide free, portable, high-quality versions of the Zip and UnZip compressor-archiver utilities that are compatible with the DOS-based PKZIP by PKWARE, Inc.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/62612a5e32dcd63ac1eb74fb6302ccbac39abacf8d209ada4d80e676aa0a6c65/zip/UNIHASH/recipe/zip"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"packageUrl","identifier":"pkg:yocto/core/zip@3.0"},{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:zip:3.0:*:*:*:*:*:*:*"}],"name":"zip","summary":"Compressor/archiver for creating and modifying .zip files"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/relationship/a18bf9b9b9614dc494bcc5b3fae38e49","scope":"build","from":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/recipe/zip","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/a1b7df3bb83b28b57ecabfa7ea24af08c8f009cdaf0eddaeda1550e20b8e7aad/gcc-cross-aarch64/UNIHASH/recipe/gcc-cross-aarch64","http://spdxdocs.org/openembedded-alias/by-doc-hash/c58c168c23f1f2e6fcc9b0baefff221e5e69465f454152fa33c05f569ef3d07a/glibc/UNIHASH/recipe/glibc","http://spdxdocs.org/openembedded-alias/by-doc-hash/e566e9d50764647375730ed82582046eed4c1855ce7b3073b557fbef31ccac85/gcc-runtime/UNIHASH/recipe/gcc-runtime"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/62612a5e32dcd63ac1eb74fb6302ccbac39abacf8d209ada4d80e676aa0a6c65/zip/UNIHASH/relationship/a18bf9b9b9614dc494bcc5b3fae38e49"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/relationship/f2e88f920181279b6bb651aa8e83904f","from":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/recipe/zip","relationshipType":"hasAssociatedVulnerability","to":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/vulnerability/CVE-2018-13410","http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/vulnerability/CVE-2018-13684"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/62612a5e32dcd63ac1eb74fb6302ccbac39abacf8d209ada4d80e676aa0a6c65/zip/UNIHASH/relationship/f2e88f920181279b6bb651aa8e83904f"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/vex-not-affected/2d4b7f690c746cc9123d1c711bbcfa08","security_impactStatement":"Not for zip but for smart contract implementation for it","security_statusNotes":"cpe-incorrect","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/vulnerability/CVE-2018-13684","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/recipe/zip"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/62612a5e32dcd63ac1eb74fb6302ccbac39abacf8d209ada4d80e676aa0a6c65/zip/UNIHASH/vex-not-affected/2d4b7f690c746cc9123d1c711bbcfa08"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/vex-not-affected/2e5f7045c25dece10552fd5540163bcc","security_impactStatement":"Disputed and also Debian doesn't consider a vulnerability","security_statusNotes":"disputed","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/vulnerability/CVE-2018-13410","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/recipe/zip"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/62612a5e32dcd63ac1eb74fb6302ccbac39abacf8d209ada4d80e676aa0a6c65/zip/UNIHASH/vex-not-affected/2e5f7045c25dece10552fd5540163bcc"}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/vulnerability/CVE-2018-13410","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/62612a5e32dcd63ac1eb74fb6302ccbac39abacf8d209ada4d80e676aa0a6c65/zip/UNIHASH/vulnerability/CVE-2018-13410"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2018-13410","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2018-13410","https://www.cve.org/CVERecord?id=CVE-2018-13410"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/zip-eedaa063-acd7-5ef9-b381-c604a2933775/73fe2894a6bde808d0f9b1c0f6b72e883df49a1e76e6c9ac566b432774f2fc30/vulnerability/CVE-2018-13684","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/62612a5e32dcd63ac1eb74fb6302ccbac39abacf8d209ada4d80e676aa0a6c65/zip/UNIHASH/vulnerability/CVE-2018-13684"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2018-13684","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2018-13684","https://www.cve.org/CVERecord?id=CVE-2018-13684"]}]}]}