{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/base-files-ee9424e3-1d7e-5739-b9cd-237a1a6f843f/f8709d450f5d517b1533e54bf4219d7676b2aa558c07c3361e8579cf95adeba1/document/static-base-files","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/base-files-ee9424e3-1d7e-5739-b9cd-237a1a6f843f/f8709d450f5d517b1533e54bf4219d7676b2aa558c07c3361e8579cf95adeba1/recipe/base-files"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/base-files/static-base-files/base-files/UNIHASH/document/static-base-files","https://rdf.openembedded.org/spdx/3.0/link-name":"bfe4ff6d95073696a693614b6fc16557aa99ec61e21849c9d72b439cfac900a0"}],"name":"static-base-files"},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/base-files-ee9424e3-1d7e-5739-b9cd-237a1a6f843f/f8709d450f5d517b1533e54bf4219d7676b2aa558c07c3361e8579cf95adeba1/recipe/base-files","software_packageUrl":"pkg:yocto/core/base-files@3.0.14","software_packageVersion":"3.0.14","software_sourceInfo":"{\"FILENAME\":\"base-files_3.0.14.bb\",\"FILE_LAYERNAME\":\"core\"}","software_primaryPurpose":"specification","creationInfo":"_:CreationInfo1","description":"The base-files package creates the basic system directory structure and provides a small set of key configuration files for the system.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/bfe4ff6d95073696a693614b6fc16557aa99ec61e21849c9d72b439cfac900a0/base-files/UNIHASH/recipe/base-files"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"packageUrl","identifier":"pkg:yocto/core/base-files@3.0.14"},{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:base-files:3.0.14:*:*:*:*:*:*:*"}],"name":"base-files","summary":"Miscellaneous files for the base system"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/base-files-ee9424e3-1d7e-5739-b9cd-237a1a6f843f/f8709d450f5d517b1533e54bf4219d7676b2aa558c07c3361e8579cf95adeba1/relationship/bd0b3d72d53c83acddba6ac5bb52f3d2","from":"http://spdx.org/spdxdocs/base-files-ee9424e3-1d7e-5739-b9cd-237a1a6f843f/f8709d450f5d517b1533e54bf4219d7676b2aa558c07c3361e8579cf95adeba1/recipe/base-files","relationshipType":"hasAssociatedVulnerability","to":["http://spdx.org/spdxdocs/base-files-ee9424e3-1d7e-5739-b9cd-237a1a6f843f/f8709d450f5d517b1533e54bf4219d7676b2aa558c07c3361e8579cf95adeba1/vulnerability/CVE-2018-6557"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/bfe4ff6d95073696a693614b6fc16557aa99ec61e21849c9d72b439cfac900a0/base-files/UNIHASH/relationship/bd0b3d72d53c83acddba6ac5bb52f3d2"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/base-files-ee9424e3-1d7e-5739-b9cd-237a1a6f843f/f8709d450f5d517b1533e54bf4219d7676b2aa558c07c3361e8579cf95adeba1/vex-not-affected/0e23b10d02339240bd000e0a3c2f65a5","security_impactStatement":"Ubuntu specific motd update code","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-platform","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/base-files-ee9424e3-1d7e-5739-b9cd-237a1a6f843f/f8709d450f5d517b1533e54bf4219d7676b2aa558c07c3361e8579cf95adeba1/vulnerability/CVE-2018-6557","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/base-files-ee9424e3-1d7e-5739-b9cd-237a1a6f843f/f8709d450f5d517b1533e54bf4219d7676b2aa558c07c3361e8579cf95adeba1/recipe/base-files"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/bfe4ff6d95073696a693614b6fc16557aa99ec61e21849c9d72b439cfac900a0/base-files/UNIHASH/vex-not-affected/0e23b10d02339240bd000e0a3c2f65a5"}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/base-files-ee9424e3-1d7e-5739-b9cd-237a1a6f843f/f8709d450f5d517b1533e54bf4219d7676b2aa558c07c3361e8579cf95adeba1/vulnerability/CVE-2018-6557","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/bfe4ff6d95073696a693614b6fc16557aa99ec61e21849c9d72b439cfac900a0/base-files/UNIHASH/vulnerability/CVE-2018-6557"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2018-6557","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2018-6557","https://www.cve.org/CVERecord?id=CVE-2018-6557"]}]},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"}]}