{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/document/static-wpa-supplicant","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/recipe/wpa-supplicant"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/wpa-supplicant/static-wpa-supplicant/wpa-supplicant/UNIHASH/document/static-wpa-supplicant","https://rdf.openembedded.org/spdx/3.0/link-name":"eb282ad2931614c5bd418b8fdbe3935c0beeb61a5b819a8ba895466d4be2f22d"}],"name":"static-wpa-supplicant"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/patch/0/CVE-2025-24912-01_patch","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/eb282ad2931614c5bd418b8fdbe3935c0beeb61a5b819a8ba895466d4be2f22d/wpa-supplicant/UNIHASH/patch/0/CVE-2025-24912-01_patch"}],"name":"CVE-2025-24912-01.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"5996b3861aba0eba3153755c741f176e8e13e9d693e498c6dfaaf17f2cdb4013"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/patch/1/CVE-2025-24912-02_patch","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/eb282ad2931614c5bd418b8fdbe3935c0beeb61a5b819a8ba895466d4be2f22d/wpa-supplicant/UNIHASH/patch/1/CVE-2025-24912-02_patch"}],"name":"CVE-2025-24912-02.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"73141bb1adf5b3de87da16afbf1a2e5c6589166b2164b101cbda3fcb958d471f"}]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/recipe/wpa-supplicant","software_homePage":"http://w1.fi/wpa_supplicant/","software_packageUrl":"pkg:yocto/core/wpa-supplicant@2.11","software_packageVersion":"2.11","software_sourceInfo":"{\"FILENAME\":\"wpa-supplicant_2.11.bb\",\"FILE_LAYERNAME\":\"core\"}","software_primaryPurpose":"specification","creationInfo":"_:CreationInfo1","description":"wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/eb282ad2931614c5bd418b8fdbe3935c0beeb61a5b819a8ba895466d4be2f22d/wpa-supplicant/UNIHASH/recipe/wpa-supplicant"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"packageUrl","identifier":"pkg:yocto/core/wpa-supplicant@2.11"},{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:wpa_supplicant:2.11:*:*:*:*:*:*:*"}],"name":"wpa-supplicant","summary":"Client for Wi-Fi Protected Access (WPA)"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/relationship/3c213d26543576bd9ac30b5f2e698153","scope":"build","from":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/recipe/wpa-supplicant","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/90c2f601eb0191e71d5e1b4962523ed920521210ddedcedee1258a6432fd2f00/systemd-systemctl-native/UNIHASH/recipe/systemd-systemctl-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/a1b7df3bb83b28b57ecabfa7ea24af08c8f009cdaf0eddaeda1550e20b8e7aad/gcc-cross-aarch64/UNIHASH/recipe/gcc-cross-aarch64","http://spdxdocs.org/openembedded-alias/by-doc-hash/adb78b4b90f2504e53939a4552e14137ed2f050f7b3db50320d29dd3caeaf794/dbus/UNIHASH/recipe/dbus","http://spdxdocs.org/openembedded-alias/by-doc-hash/c58c168c23f1f2e6fcc9b0baefff221e5e69465f454152fa33c05f569ef3d07a/glibc/UNIHASH/recipe/glibc","http://spdxdocs.org/openembedded-alias/by-doc-hash/e566e9d50764647375730ed82582046eed4c1855ce7b3073b557fbef31ccac85/gcc-runtime/UNIHASH/recipe/gcc-runtime","http://spdxdocs.org/openembedded-alias/by-doc-hash/e988e8e6f79c5fa2d344278d78380641d7b62a732ba448697fbd630fc41cff45/openssl/UNIHASH/recipe/openssl","http://spdxdocs.org/openembedded-alias/by-doc-hash/ebc2a99b882e52b9d42f3f9b02ecee6d79ded3f2b0819a7f1746f56bb2880c6c/pkgconf-native/UNIHASH/recipe/pkgconf-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/f7ac6e1313539eaa600c65ca89ee204c9b42cf495708a1ecfab0b20065cd6571/libnl/UNIHASH/recipe/libnl"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/eb282ad2931614c5bd418b8fdbe3935c0beeb61a5b819a8ba895466d4be2f22d/wpa-supplicant/UNIHASH/relationship/3c213d26543576bd9ac30b5f2e698153"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/relationship/83c568a31dd95dabd1b5e53d341cdda5","scope":"build","from":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/vex-fixed/60443b6ea7e02105bc05e88ab7c3e7da","relationshipType":"patchedBy","to":["http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/patch/0/CVE-2025-24912-01_patch","http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/patch/1/CVE-2025-24912-02_patch"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/eb282ad2931614c5bd418b8fdbe3935c0beeb61a5b819a8ba895466d4be2f22d/wpa-supplicant/UNIHASH/relationship/83c568a31dd95dabd1b5e53d341cdda5"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/relationship/dfd4cf48a56ac91bc9df6e24f81bbd4f","from":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/recipe/wpa-supplicant","relationshipType":"hasAssociatedVulnerability","to":["http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/vulnerability/CVE-2024-5290","http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/vulnerability/CVE-2025-24912"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/eb282ad2931614c5bd418b8fdbe3935c0beeb61a5b819a8ba895466d4be2f22d/wpa-supplicant/UNIHASH/relationship/dfd4cf48a56ac91bc9df6e24f81bbd4f"}]},{"type":"security_VexFixedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/vex-fixed/60443b6ea7e02105bc05e88ab7c3e7da","security_statusNotes":"fix-file-included","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/vulnerability/CVE-2025-24912","relationshipType":"fixedIn","to":["http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/recipe/wpa-supplicant"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/eb282ad2931614c5bd418b8fdbe3935c0beeb61a5b819a8ba895466d4be2f22d/wpa-supplicant/UNIHASH/vex-fixed/60443b6ea7e02105bc05e88ab7c3e7da"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/vex-not-affected/5823e2e951e521b1502c24ef2053031a","security_impactStatement":"this only affects Ubuntu and other platforms patching wpa-supplicant","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-platform","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/vulnerability/CVE-2024-5290","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/recipe/wpa-supplicant"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/eb282ad2931614c5bd418b8fdbe3935c0beeb61a5b819a8ba895466d4be2f22d/wpa-supplicant/UNIHASH/vex-not-affected/5823e2e951e521b1502c24ef2053031a"}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/vulnerability/CVE-2024-5290","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/eb282ad2931614c5bd418b8fdbe3935c0beeb61a5b819a8ba895466d4be2f22d/wpa-supplicant/UNIHASH/vulnerability/CVE-2024-5290"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2024-5290","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2024-5290","https://www.cve.org/CVERecord?id=CVE-2024-5290"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/wpa-supplicant-2f87f028-19a3-5031-b9a7-83927ea203ae/bd4f0d76a5f8f191b167cf5d3fc2b4d6909d79889e87b2f9c5ba69ce72cd88b6/vulnerability/CVE-2025-24912","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/eb282ad2931614c5bd418b8fdbe3935c0beeb61a5b819a8ba895466d4be2f22d/wpa-supplicant/UNIHASH/vulnerability/CVE-2025-24912"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2025-24912","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2025-24912","https://www.cve.org/CVERecord?id=CVE-2025-24912"]}]}]}