{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/0582ead1c61d10ec2147d1484985e4cba6fe4b7c59c2beef298c9569dc3bb947/document/static-shadow-native","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/0582ead1c61d10ec2147d1484985e4cba6fe4b7c59c2beef298c9569dc3bb947/recipe/shadow-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/shadow-native/static-shadow-native/shadow-native/UNIHASH/document/static-shadow-native","https://rdf.openembedded.org/spdx/3.0/link-name":"38c3b1ce5f88425dcc92e3e4769cf6bdf7bf983694607db7424961c5094f5931"}],"name":"static-shadow-native"},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/0582ead1c61d10ec2147d1484985e4cba6fe4b7c59c2beef298c9569dc3bb947/recipe/shadow-native","software_homePage":"http://github.com/shadow-maint/shadow","software_packageUrl":"pkg:yocto/core/shadow@4.19.4","software_packageVersion":"4.19.4","software_sourceInfo":"{\"FILENAME\":\"shadow_4.19.4.bb\",\"FILE_LAYERNAME\":\"core\"}","software_primaryPurpose":"specification","creationInfo":"_:CreationInfo1","description":"Tools to change and administer password and group data","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/recipe-extension","https://rdf.openembedded.org/spdx/3.0/is-native":true},{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/38c3b1ce5f88425dcc92e3e4769cf6bdf7bf983694607db7424961c5094f5931/shadow-native/UNIHASH/recipe/shadow-native"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"packageUrl","identifier":"pkg:yocto/core/shadow@4.19.4"},{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:debian:shadow:4.19.4:*:*:*:*:*:*:*"},{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:shadow_project:shadow:4.19.4:*:*:*:*:*:*:*"}],"name":"shadow-native","summary":"Tools to change and administer password and group data"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/0582ead1c61d10ec2147d1484985e4cba6fe4b7c59c2beef298c9569dc3bb947/relationship/3c3f3af6d510d89834b54bfc8c29c186","scope":"build","from":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/0582ead1c61d10ec2147d1484985e4cba6fe4b7c59c2beef298c9569dc3bb947/recipe/shadow-native","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/3f4ed898dc3306ad88161c6cb3f6adb7bd2ffca5a138ac9d0494ff49a1d3999f/libtool-native/UNIHASH/recipe/libtool-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/5c015a9e6d554256972f535f96f383c2cad1a86ea1d38749503ca61f9b1e93cd/libbsd-native/UNIHASH/recipe/libbsd-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/87cd64a38e0da58ed28fd300c3fef3d23d0f3ec11e228eb9614c2930df524aa5/gettext-minimal-native/UNIHASH/recipe/gettext-minimal-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/9791cb1fd5a0f2a360c88b2ab1c20643ac793fe593bde00e264ec9c79b52bc08/attr-native/UNIHASH/recipe/attr-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/aa5acc23378acbbd9f17af4a565ec6e8e373aa6406d83cbbc04d76f16bb1cd38/autoconf-native/UNIHASH/recipe/autoconf-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/dff718261fe91d9119e4103e013304a7639ec412ef35c10d0dea2927fd7c8051/automake-native/UNIHASH/recipe/automake-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/ebc2a99b882e52b9d42f3f9b02ecee6d79ded3f2b0819a7f1746f56bb2880c6c/pkgconf-native/UNIHASH/recipe/pkgconf-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/38c3b1ce5f88425dcc92e3e4769cf6bdf7bf983694607db7424961c5094f5931/shadow-native/UNIHASH/relationship/3c3f3af6d510d89834b54bfc8c29c186"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/0582ead1c61d10ec2147d1484985e4cba6fe4b7c59c2beef298c9569dc3bb947/relationship/ff88ca01475315abd09b85b89eaf5cca","from":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/0582ead1c61d10ec2147d1484985e4cba6fe4b7c59c2beef298c9569dc3bb947/recipe/shadow-native","relationshipType":"hasAssociatedVulnerability","to":["http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/0582ead1c61d10ec2147d1484985e4cba6fe4b7c59c2beef298c9569dc3bb947/vulnerability/CVE-2013-4235"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/38c3b1ce5f88425dcc92e3e4769cf6bdf7bf983694607db7424961c5094f5931/shadow-native/UNIHASH/relationship/ff88ca01475315abd09b85b89eaf5cca"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/0582ead1c61d10ec2147d1484985e4cba6fe4b7c59c2beef298c9569dc3bb947/vex-not-affected/2b95fb0fc68f0a0fd958a57c88d9272e","security_impactStatement":"Severity is low and marked as closed and won't fix.","security_statusNotes":"upstream-wontfix","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/0582ead1c61d10ec2147d1484985e4cba6fe4b7c59c2beef298c9569dc3bb947/vulnerability/CVE-2013-4235","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/0582ead1c61d10ec2147d1484985e4cba6fe4b7c59c2beef298c9569dc3bb947/recipe/shadow-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/38c3b1ce5f88425dcc92e3e4769cf6bdf7bf983694607db7424961c5094f5931/shadow-native/UNIHASH/vex-not-affected/2b95fb0fc68f0a0fd958a57c88d9272e"}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/shadow-native-05abf2b1-b55e-5fed-a2f3-3336e7a17f60/0582ead1c61d10ec2147d1484985e4cba6fe4b7c59c2beef298c9569dc3bb947/vulnerability/CVE-2013-4235","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/38c3b1ce5f88425dcc92e3e4769cf6bdf7bf983694607db7424961c5094f5931/shadow-native/UNIHASH/vulnerability/CVE-2013-4235"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2013-4235","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2013-4235","https://www.cve.org/CVERecord?id=CVE-2013-4235"]}]}]}