{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2025-07-20T16:15:44Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/document/package-libpixman-1-0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/pixman/package-libpixman-1-0/pixman/UNIHASH/document/package-libpixman-1-0","https://rdf.openembedded.org/spdx/3.0/link-name":"6192aac842de19831ee2d680dd0460479c2a51adf97eee8ee39691472caae26e"}],"name":"package-libpixman-1-0","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/package/libpixman-1-0"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/package/libpixman-1-0","creationInfo":"_:CreationInfo0","description":"Pixman provides a library for manipulating pixel regions -- a set of Y-X banded rectangles, image compositing using the Porter/Duff model and implicit mask generation for geometric primitives including trapezoids, triangles, and rectangles.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6192aac842de19831ee2d680dd0460479c2a51adf97eee8ee39691472caae26e/pixman/UNIHASH/package/libpixman-1-0"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:pixman:0.46.4:*:*:*:*:*:*:*"}],"name":"libpixman-1-0","summary":"Pixman: Pixel Manipulation library","software_primaryPurpose":"install","software_homePage":"http://www.pixman.org","software_packageVersion":"0.46.4"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/package/libpixman-1-0/file/1","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6192aac842de19831ee2d680dd0460479c2a51adf97eee8ee39691472caae26e/pixman/UNIHASH/package/libpixman-1-0/file/1"}],"name":"usr/lib/libpixman-1.so.0.46.4","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"aaa9802ba884d6b2cbefce492b5546bb65dccd8622b36a673e9f11cb9f06d175"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/relationship/076e10429b65bc09c04b0596d87b9ad9","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6192aac842de19831ee2d680dd0460479c2a51adf97eee8ee39691472caae26e/pixman/UNIHASH/relationship/076e10429b65bc09c04b0596d87b9ad9"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/package/libpixman-1-0"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/relationship/4dda60f548167c32cb4d87aa996de9b3","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6192aac842de19831ee2d680dd0460479c2a51adf97eee8ee39691472caae26e/pixman/UNIHASH/relationship/4dda60f548167c32cb4d87aa996de9b3"}],"from":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/package/libpixman-1-0","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/vulnerability/CVE-2023-37769"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/relationship/8f1d8666573c70e4e816ded23130b437","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6192aac842de19831ee2d680dd0460479c2a51adf97eee8ee39691472caae26e/pixman/UNIHASH/relationship/8f1d8666573c70e4e816ded23130b437"}],"from":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/package/libpixman-1-0","relationshipType":"contains","to":["http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/package/libpixman-1-0/file/1"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/relationship/dde33b47f9e2e604171e3863147b0134","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6192aac842de19831ee2d680dd0460479c2a51adf97eee8ee39691472caae26e/pixman/UNIHASH/relationship/dde33b47f9e2e604171e3863147b0134"}],"from":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/package/libpixman-1-0","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/license/3_27_0/MIT_AND_LicenseRef-PD/4083fe969adc4197b94a7847dd90869b"]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/vex-not-affected/42cad235675cdb99612a51848b0747d3","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/6192aac842de19831ee2d680dd0460479c2a51adf97eee8ee39691472caae26e/pixman/UNIHASH/vex-not-affected/42cad235675cdb99612a51848b0747d3"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0f5a451f13e2743ba5f675f3d14e7760d9c9f63b65b344c6280ff6823cf4db8e/pixman/UNIHASH/vulnerability/CVE-2023-37769","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/pixman-ebea6f11-6b46-5116-a1d7-de83467f926e/aacfa11dd0d59e6ea9477877ba88331461ae259a08d88745b6188f54c26f09a5/package/libpixman-1-0"],"security_vexVersion":"1.0.0","security_impactStatement":"stress-test is an uninstalled test","security_justificationType":"vulnerableCodeNotPresent"}]}