{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-03-08T12:35:35Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/build/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/build/recipe"}],"name":"cairo:do_create_spdx:recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/document/recipe-cairo","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/cairo/recipe-cairo/cairo/UNIHASH/document/recipe-cairo","https://rdf.openembedded.org/spdx/3.0/link-name":"6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2"}],"name":"recipe-cairo","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/build/recipe"]},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/license/3_27_0/GPL-3_0-or-later","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/license/3_27_0/GPL-3_0-or-later"}],"simplelicensing_licenseExpression":"GPL-3.0-or-later","simplelicensing_licenseListVersion":"3.27.0"},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/license/3_27_0/MPL-1_1_OR_LGPL-2_1-only","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/license/3_27_0/MPL-1_1_OR_LGPL-2_1-only"}],"simplelicensing_licenseExpression":"MPL-1.1 OR LGPL-2.1-only","simplelicensing_licenseListVersion":"3.27.0"},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/license/3_27_0/__MPL-1_1_OR_LGPL-2_1-only___AND_GPL-3_0-or-later","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/license/3_27_0/__MPL-1_1_OR_LGPL-2_1-only___AND_GPL-3_0-or-later"}],"simplelicensing_licenseExpression":"( MPL-1.1 OR LGPL-2.1-only ) AND GPL-3.0-or-later","simplelicensing_licenseListVersion":"3.27.0"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/relationship/4723e14f546434454d44809ff66d7d65","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/relationship/4723e14f546434454d44809ff66d7d65"}],"from":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/license/3_27_0/__MPL-1_1_OR_LGPL-2_1-only___AND_GPL-3_0-or-later"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/relationship/7824c479210ad0cc69e9156742b240ba","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/relationship/7824c479210ad0cc69e9156742b240ba"}],"from":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/license/3_27_0/__MPL-1_1_OR_LGPL-2_1-only___AND_GPL-3_0-or-later"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/relationship/866d8531e5ae400057e77e8d3de4ac4b","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/relationship/866d8531e5ae400057e77e8d3de4ac4b"}],"from":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/source/1","http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/source/2"],"scope":"build"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/relationship/dcb44182371ec3b8b11cee6221ac8dac","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/relationship/dcb44182371ec3b8b11cee6221ac8dac"}],"from":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/135d465a523919ff8bf03e11ab4280c2d9625fd876d728639a461a41e43976de/gcc-runtime/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/16b2950e18af44fb317f4bbc4ddfb09714ab9ce1c1ffa3853f42d32bc8d328a8/libx11/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/3d4ceabb7db09c3738e3348d9ed94c3eb745dd9756fae5bbc6d2a18eca0e8b7c/meson-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/4df78039053fffcb254eda4aa76a485c3605a2f85f47f69209be43e63f94e813/libxrender/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/4f85d23f04f7107632034fe7f9a7f6aa396ad03a503af13cde3f455b90606f51/ninja-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/57301e8063a8bf25308226271627db2b78675cda9f648c5c6c14a2b9c18f48dc/zlib/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/6336e7f64c21a6ecf6c28648a5b8b10474f7daae1b711e663c13218fcff0ba93/opkg-utils/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/7dd0cffd98dab687fbb61503db6ecc5a94cb621b4d1d59aa4cb99b6dace629a3/gtk-doc-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/8a5b293a3141e624524218c5b78b6d9fa852635f0e7c80c58fb1cdc0cbcb3a15/libpng/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/8bcc50109a89a2a5b45d13a5cd9a3fb7e276afd2bf762de4772a02f224c2f6bf/glibc/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/97d593d2dcd16cf9167e4aae43d0da61d8b1eef026338b016de4427713b18631/libxext/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/9848637ce8f8079708377e9cf20c79a7003acfe4b73b7643c2ededdfe6d102d4/libxcb/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/a99e029532bd32332b3abbc83f6448bff7b86a18c436c4d2304c17282c332d40/python3-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/bbdd8d771d43ab958fdc500fc604f5c5c73ee12ef0eb9118668516ac3a42ea7a/gcc-cross-aarch64/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/c07b112b9f63935e1c33b3627039e4a27ca0bb24542a71bcbe1ae805d0d69207/pkgconfig-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/c8d755670219c10bdc093947386070b8b7c7c4137b26ce7d87f15af749ebf5f6/qemu-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/ce679b1c71be81d48fb5eb57064c37127f65ff35c463d7ed93b43c3135d17082/fontconfig/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/dbd966e0321c64ca30265924e212b5cd834705441f159c65c5748d2fca824e97/glib-2.0/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/df3e4c3bc165c09daef57e6b7909b25f95164985567131503424c1f27703fec2/freetype/UNIHASH/build/recipe"],"scope":"build"},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/source/1","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/source/1"}],"name":"cairo-1.18.4.tar.xz","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"445ed8208a6e4823de1226a74ca319d3600e83f6369f99b14265006599c32ccb"}],"software_primaryPurpose":"source","software_downloadLocation":"http://cairographics.org/releases/cairo-1.18.4.tar.xz"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/source/2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/source/2"}],"name":"cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"73cdc1c353081459b8083cc2f788699074e15536d16e7a3bb9dff6fc2801a0cc"}],"software_primaryPurpose":"patch"},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/cairo-0f24e6ca-37fc-5d12-bb02-5cc5f39b774f/1f1063ce4d0a5c94d05355e1ec57ababd4fea723ab24666cf804c5d4f20298d2/vulnerability/CVE-2017-7475","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6e3a79560a305461bb2406261874ff96dc4d8cf2e0730370562b781db6cacdd2/cairo/UNIHASH/vulnerability/CVE-2017-7475"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2017-7475","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2017-7475","https://www.cve.org/CVERecord?id=CVE-2017-7475"]}]}]}