{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2025-08-30T08:39:01Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/document/package-libharfbuzz-dbg","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/harfbuzz/package-libharfbuzz-dbg/harfbuzz/UNIHASH/document/package-libharfbuzz-dbg"}],"name":"package-libharfbuzz-dbg","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg","creationInfo":"_:CreationInfo0","description":"HarfBuzz is an OpenType text shaping engine.  This package contains ELF symbols and related sources for debugging purposes.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/package/libharfbuzz-dbg"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:harfbuzz:11.4.5:*:*:*:*:*:*:*"}],"name":"libharfbuzz-dbg","summary":"Text shaping library - Debugging files","software_primaryPurpose":"install","software_homePage":"http://www.freedesktop.org/wiki/Software/HarfBuzz","software_packageVersion":"11.4.5"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/1","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/package/libharfbuzz-dbg/file/1"}],"name":"usr/bin/.debug/hb-info","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"6e958eede0a8a47ac7916aa5006c0222d95d6d9ac8151cca2e242771c6f50f31"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/2","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/package/libharfbuzz-dbg/file/2"}],"name":"usr/bin/.debug/hb-shape","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"0766bf0ddd5c21d0a4ba763a16c80aa1dd0aaf30742e6cd96036528d6539e572"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/3","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/package/libharfbuzz-dbg/file/3"}],"name":"usr/bin/.debug/hb-subset","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"0827e47f24b643745c15d5d95e2b09b4fe23aa6ca082c7659d391cce2e24e25a"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/4","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/package/libharfbuzz-dbg/file/4"}],"name":"usr/bin/.debug/hb-view","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"1d7f6eb73f996c851a276d5588f979ee793843b535f22eeb63672238bded2aab"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/5","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/package/libharfbuzz-dbg/file/5"}],"name":"usr/lib/.debug/libharfbuzz-cairo.so.0.61145.0","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"ec552e09755e2da13da5d0ba647a88d3c8ba1056ac52e5f81351ea185f0e899b"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/6","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/package/libharfbuzz-dbg/file/6"}],"name":"usr/lib/.debug/libharfbuzz-gobject.so.0.61145.0","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"542c0b6c40801427adaf96728e497339b25f956579b786b6ab725e917c97cad2"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/7","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/package/libharfbuzz-dbg/file/7"}],"name":"usr/lib/.debug/libharfbuzz-icu.so.0.61145.0","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"ac93e97777a12bf51f1556c092c5bb5b299f6bf3442e23e807500b84b1bd470e"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/8","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/package/libharfbuzz-dbg/file/8"}],"name":"usr/lib/.debug/libharfbuzz-subset.so.0.61145.0","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"c0d899a8e2922d4b5710a73e814cce1c0a151dfa327babdbdcad1dd9b966c83f"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/9","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/package/libharfbuzz-dbg/file/9"}],"name":"usr/lib/.debug/libharfbuzz.so.0.61145.0","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"dd7fcf716acc2a520baa3a0c2a39e1f28d223b7b7f51dc0bd483a298cc5c6c09"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/relationship/384e0f6ccf86c063456ab14a46fc40b4","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/relationship/384e0f6ccf86c063456ab14a46fc40b4"}],"from":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg","relationshipType":"contains","to":["http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/1","http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/2","http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/3","http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/4","http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/5","http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/6","http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/7","http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/8","http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg/file/9"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/relationship/6bdb64833e7ac1b3a952201ff9b32683","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/relationship/6bdb64833e7ac1b3a952201ff9b32683"}],"from":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/4373c067b169f4f81422377866c78852c1d1dc8188013c93564cabba5f7dd742/harfbuzz/UNIHASH/license/3_27_0/MIT"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/relationship/751d0546213bd86bda1161f14da4d124","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/relationship/751d0546213bd86bda1161f14da4d124"}],"from":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/4373c067b169f4f81422377866c78852c1d1dc8188013c93564cabba5f7dd742/harfbuzz/UNIHASH/vulnerability/CVE-2026-22693"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/relationship/d34c4158719837d5bba6ebfbad7c685c","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/relationship/d34c4158719837d5bba6ebfbad7c685c"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4373c067b169f4f81422377866c78852c1d1dc8188013c93564cabba5f7dd742/harfbuzz/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg"],"scope":"build"},{"type":"security_VexFixedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/vex-fixed/1894974a8015884c19fc1dc6f9e1c337","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4b3ebda8ea0088e758d7abfeb648357865ee0e68ef7ce8d0bca2503bf950b486/harfbuzz/UNIHASH/vex-fixed/1894974a8015884c19fc1dc6f9e1c337"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/4373c067b169f4f81422377866c78852c1d1dc8188013c93564cabba5f7dd742/harfbuzz/UNIHASH/vulnerability/CVE-2026-22693","relationshipType":"fixedIn","to":["http://spdx.org/spdxdocs/harfbuzz-53d1536b-19ac-575f-9e53-9dfc0205d192/eeead865cbe4ed97c4dd314d01502f9ff9a6b08ceec0cd08ff912265b1e67356/package/libharfbuzz-dbg"],"security_vexVersion":"1.0.0"}]}