{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/document/static-nss-native","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/recipe/nss-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/nss-native/static-nss-native/nss-native/UNIHASH/document/static-nss-native","https://rdf.openembedded.org/spdx/3.0/link-name":"131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df"}],"name":"static-nss-native"},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/recipe/nss-native","software_homePage":"https://firefox-source-docs.mozilla.org/security/nss/index.html","software_packageUrl":"pkg:yocto/openembedded-layer/nss@3.122","software_packageVersion":"3.122","software_sourceInfo":"{\"FILENAME\":\"nss_3.122.bb\",\"FILE_LAYERNAME\":\"openembedded-layer\"}","software_primaryPurpose":"specification","creationInfo":"_:CreationInfo1","description":"Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security standards.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/recipe-extension","https://rdf.openembedded.org/spdx/3.0/is-native":true},{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/recipe/nss-native"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"packageUrl","identifier":"pkg:yocto/openembedded-layer/nss@3.122"},{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:network_security_services:3.122:*:*:*:*:*:*:*"}],"name":"nss-native","summary":"Mozilla's SSL and TLS implementation"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/relationship/3fb3fffd944df480d2e1cf2815040178","scope":"build","from":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/recipe/nss-native","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0cc80001f5b135fb77b44cd65e75533be73d5d3497105dac96155d75b9121351/sqlite3-native/UNIHASH/recipe/sqlite3-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/593769a50f8a36b6a284438681e2af7bba6257cdda72852939fcf37ed79fe8aa/nspr-native/UNIHASH/recipe/nspr-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/b4b340ec65f43476c010212e56d173820e64966224302c1642f75cb57c62eac1/zlib-native/UNIHASH/recipe/zlib-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/relationship/3fb3fffd944df480d2e1cf2815040178"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/relationship/aa795ac2a87880634c4de48607852316","from":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/recipe/nss-native","relationshipType":"hasAssociatedVulnerability","to":["http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2017-11695","http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2017-11696","http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2017-11697","http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2017-11698","http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2022-3479"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/relationship/aa795ac2a87880634c4de48607852316"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vex-not-affected/617341db533454998102e18acde76b23","security_impactStatement":"This only affect the legacy db (libnssdbm), only compiled with --enable-legacy-db","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-config","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2017-11696","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/recipe/nss-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/vex-not-affected/617341db533454998102e18acde76b23"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vex-not-affected/9ed9de040a07df2e741c9021effa8e4d","security_impactStatement":"vulnerability was introduced in 3.77 and fixed in 3.87","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-config","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2022-3479","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/recipe/nss-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/vex-not-affected/9ed9de040a07df2e741c9021effa8e4d"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vex-not-affected/a7c72352a30896e4afc8d82e3ab782a6","security_impactStatement":"This only affect the legacy db (libnssdbm), only compiled with --enable-legacy-db","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-config","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2017-11698","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/recipe/nss-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/vex-not-affected/a7c72352a30896e4afc8d82e3ab782a6"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vex-not-affected/c2072c96d4a3c23378177a5dc679b7de","security_impactStatement":"This only affect the legacy db (libnssdbm), only compiled with --enable-legacy-db","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-config","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2017-11697","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/recipe/nss-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/vex-not-affected/c2072c96d4a3c23378177a5dc679b7de"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vex-not-affected/cc82d5430f91d293666f79f01050b597","security_impactStatement":"This only affect the legacy db (libnssdbm), only compiled with --enable-legacy-db","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-config","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2017-11695","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/recipe/nss-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/vex-not-affected/cc82d5430f91d293666f79f01050b597"}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2017-11695","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/vulnerability/CVE-2017-11695"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2017-11695","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2017-11695","https://www.cve.org/CVERecord?id=CVE-2017-11695"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2017-11696","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/vulnerability/CVE-2017-11696"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2017-11696","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2017-11696","https://www.cve.org/CVERecord?id=CVE-2017-11696"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2017-11697","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/vulnerability/CVE-2017-11697"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2017-11697","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2017-11697","https://www.cve.org/CVERecord?id=CVE-2017-11697"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2017-11698","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/vulnerability/CVE-2017-11698"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2017-11698","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2017-11698","https://www.cve.org/CVERecord?id=CVE-2017-11698"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nss-native-305ad848-5174-5bde-9af6-1212a03d614b/c6045df3bc02ff400da0355afb68eead9e17e17b46cee95f1694c36908dddd16/vulnerability/CVE-2022-3479","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/131cd2efa320305c157ad5cd6414c66935fbfcc31702a8fced08c0b2213652df/nss-native/UNIHASH/vulnerability/CVE-2022-3479"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2022-3479","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2022-3479","https://www.cve.org/CVERecord?id=CVE-2022-3479"]}]}]}