{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/document/static-nss","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/recipe/nss"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/nss/static-nss/nss/UNIHASH/document/static-nss","https://rdf.openembedded.org/spdx/3.0/link-name":"e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6"}],"name":"static-nss"},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/recipe/nss","software_homePage":"https://firefox-source-docs.mozilla.org/security/nss/index.html","software_packageUrl":"pkg:yocto/openembedded-layer/nss@3.122","software_packageVersion":"3.122","software_sourceInfo":"{\"FILENAME\":\"nss_3.122.bb\",\"FILE_LAYERNAME\":\"openembedded-layer\"}","software_primaryPurpose":"specification","creationInfo":"_:CreationInfo1","description":"Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security standards.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/recipe/nss"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"packageUrl","identifier":"pkg:yocto/openembedded-layer/nss@3.122"},{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:network_security_services:3.122:*:*:*:*:*:*:*"}],"name":"nss","summary":"Mozilla's SSL and TLS implementation"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/relationship/2174252b577ef17ad6d063441aed9da5","from":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/recipe/nss","relationshipType":"hasAssociatedVulnerability","to":["http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2017-11695","http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2017-11696","http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2017-11697","http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2017-11698","http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2022-3479"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/relationship/2174252b577ef17ad6d063441aed9da5"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/relationship/5c114aa50c94c0c2a0ce02b8981833b7","scope":"build","from":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/recipe/nss","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0f3f929a303352f17340e0996874ba7476c40559493744cd0af213ec5c92e1d6/nspr/UNIHASH/recipe/nspr","http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/recipe/nss-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/a1b7df3bb83b28b57ecabfa7ea24af08c8f009cdaf0eddaeda1550e20b8e7aad/gcc-cross-aarch64/UNIHASH/recipe/gcc-cross-aarch64","http://spdxdocs.org/openembedded-alias/by-doc-hash/c58c168c23f1f2e6fcc9b0baefff221e5e69465f454152fa33c05f569ef3d07a/glibc/UNIHASH/recipe/glibc","http://spdxdocs.org/openembedded-alias/by-doc-hash/e566e9d50764647375730ed82582046eed4c1855ce7b3073b557fbef31ccac85/gcc-runtime/UNIHASH/recipe/gcc-runtime","http://spdxdocs.org/openembedded-alias/by-doc-hash/f38b6ca69849e7e3f715b534621cf1e02b249d95b1bb50e51f99ccc90444c826/zlib/UNIHASH/recipe/zlib","http://spdxdocs.org/openembedded-alias/by-doc-hash/fb6b95bbd49cbdbc0cb37410b5edafb9ce09729ba8bfc83f07c4a5c3162af2fc/sqlite3/UNIHASH/recipe/sqlite3"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/relationship/5c114aa50c94c0c2a0ce02b8981833b7"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vex-not-affected/2dabb0eb2aa1a8554e8fb24332fc064a","security_impactStatement":"This only affect the legacy db (libnssdbm), only compiled with --enable-legacy-db","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-config","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2017-11696","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/recipe/nss"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/vex-not-affected/2dabb0eb2aa1a8554e8fb24332fc064a"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vex-not-affected/4792ac899a5561158621b81234de9804","security_impactStatement":"This only affect the legacy db (libnssdbm), only compiled with --enable-legacy-db","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-config","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2017-11697","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/recipe/nss"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/vex-not-affected/4792ac899a5561158621b81234de9804"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vex-not-affected/7bee5914677bcebd14ba084eb91f25b3","security_impactStatement":"vulnerability was introduced in 3.77 and fixed in 3.87","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-config","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2022-3479","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/recipe/nss"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/vex-not-affected/7bee5914677bcebd14ba084eb91f25b3"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vex-not-affected/c02b8b4a226f29d4f6473cc24acf9b8c","security_impactStatement":"This only affect the legacy db (libnssdbm), only compiled with --enable-legacy-db","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-config","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2017-11698","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/recipe/nss"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/vex-not-affected/c02b8b4a226f29d4f6473cc24acf9b8c"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vex-not-affected/e9ba0f5836ec4a53e7f7c17d5fd9e1cf","security_impactStatement":"This only affect the legacy db (libnssdbm), only compiled with --enable-legacy-db","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-config","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2017-11695","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/recipe/nss"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/vex-not-affected/e9ba0f5836ec4a53e7f7c17d5fd9e1cf"}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2017-11695","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/vulnerability/CVE-2017-11695"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2017-11695","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2017-11695","https://www.cve.org/CVERecord?id=CVE-2017-11695"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2017-11696","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/vulnerability/CVE-2017-11696"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2017-11696","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2017-11696","https://www.cve.org/CVERecord?id=CVE-2017-11696"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2017-11697","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/vulnerability/CVE-2017-11697"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2017-11697","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2017-11697","https://www.cve.org/CVERecord?id=CVE-2017-11697"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2017-11698","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/vulnerability/CVE-2017-11698"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2017-11698","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2017-11698","https://www.cve.org/CVERecord?id=CVE-2017-11698"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nss-b4f666e4-1e7b-5f90-975d-6a66eb5e5574/42da42707f61c720ba187acac5bf6266d92b8de175b69ed3863bf04fe2d2bc2c/vulnerability/CVE-2022-3479","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/e4e118d3f33a701bb09b857a5848ae86cfa305a3dcf46086b3157d2b3d53aba6/nss/UNIHASH/vulnerability/CVE-2022-3479"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2022-3479","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2022-3479","https://www.cve.org/CVERecord?id=CVE-2022-3479"]}]}]}