{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-10-15T17:06:44Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/build/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/build/recipe"}],"name":"python3-pillow:do_create_spdx:recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/document/recipe-python3-pillow","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/python3-pillow/recipe-python3-pillow/python3-pillow/UNIHASH/document/recipe-python3-pillow","https://rdf.openembedded.org/spdx/3.0/link-name":"96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173"}],"name":"recipe-python3-pillow","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/build/recipe"]},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/license/3_27_0/MIT-CMU","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/license/3_27_0/MIT-CMU"}],"simplelicensing_licenseExpression":"MIT-CMU","simplelicensing_licenseListVersion":"3.27.0"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/relationship/375a48d1ee4cd1d2c89bcfe1568b71fc","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/relationship/375a48d1ee4cd1d2c89bcfe1568b71fc"}],"from":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/source/3","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/license/3_27_0/MIT-CMU"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/relationship/8fdf3532f4f6edf40572388335d0847b","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/relationship/8fdf3532f4f6edf40572388335d0847b"}],"from":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/source/1","http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/source/2","http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/source/3"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/relationship/afe53f542201161131eb51d365dd7cb3","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/relationship/afe53f542201161131eb51d365dd7cb3"}],"from":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/license/3_27_0/MIT-CMU"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/relationship/b3f5bc82da0f8df5f4f23d739892bf60","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/relationship/b3f5bc82da0f8df5f4f23d739892bf60"}],"from":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/135d465a523919ff8bf03e11ab4280c2d9625fd876d728639a461a41e43976de/gcc-runtime/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/19ddad2b3aef0267507680343c00e6d41c4936c7d03ed8803968a155d98c2173/python3-setuptools-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/1a90967754fe6301b4c9980ad9c41ceaf74d7b4630874e55c7c474f5939dda9d/libjpeg-turbo/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/3e29235a751973985b5f0984345424bf6e8ac4cfb26fcf5e1c7d8630cd537f9f/python3-wheel-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/550224a5c31dee8806f01d11d3205aa1c52d87041da5b284c812badc09cd6531/python3-build-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/56c8f25d5f2c3a5a75f6b3fe56d1c29e6f9fb8fbf8bee13c394880003a31880b/openjpeg/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/57301e8063a8bf25308226271627db2b78675cda9f648c5c6c14a2b9c18f48dc/zlib/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/601dbac7faf52a0b8ac4965ad1b2aec1ac35552dcdb10e0c0cd36e6dfedfebad/python3-installer-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/8bcc50109a89a2a5b45d13a5cd9a3fb7e276afd2bf762de4772a02f224c2f6bf/glibc/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/a99e029532bd32332b3abbc83f6448bff7b86a18c436c4d2304c17282c332d40/python3-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/bbdd8d771d43ab958fdc500fc604f5c5c73ee12ef0eb9118668516ac3a42ea7a/gcc-cross-aarch64/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/c8a51d383af681d32c017af063c822551579acd30be34b08b25413b98a29a4a3/lcms/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/d73dd1a97c4617bb9be9c70477075b087e1f35b25dbf1e12142a0cd323a05241/python3/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/df3e4c3bc165c09daef57e6b7909b25f95164985567131503424c1f27703fec2/freetype/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/f629e5cf5f45cfc0c24e3e456816a1cdfec1479c77881225178259358d7c75b7/tiff/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/f8e70f8de1f3115e878b131c78d02f3920a962e489acb9a54f6df08ecb5f826a/python3-pybind11-native/UNIHASH/build/recipe"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/relationship/e332d43a6028d37c11f289f2d4fc7aa0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/relationship/e332d43a6028d37c11f289f2d4fc7aa0"}],"from":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/license/3_27_0/MIT-CMU"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/source/1","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/source/1"}],"name":"github.com.python-pillow.Pillow.git","software_primaryPurpose":"source","software_downloadLocation":"git+https://github.com/python-pillow/Pillow.git@693df7b42c666f88c719f9973be0ad71607328e0"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/source/2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/source/2"}],"name":"0001-support-cross-compiling.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"09667687892141e0fb5f7105836f994d2813b43467830aa23876cb40bb1996bd"}],"software_primaryPurpose":"patch"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/source/3","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/source/3"}],"name":"CVE-2026-25990.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"270bb661ef765ed030fb952946591f143fe6c355d1cff0493f80d155ced87acb"}],"software_primaryPurpose":"patch"},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/python3-pillow-c0f8c502-bb29-5ea5-9232-225ab8b37419/609367c0bfbb982afb90a975f9f499a8b6548543ee1a67af7f97aee976ab70ba/vulnerability/CVE-2026-25990","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/96f44bda83e90214dcfda598fc0fc416a3e84018648d5837b0837e0af1f09173/python3-pillow/UNIHASH/vulnerability/CVE-2026-25990"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2026-25990","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2026-25990","https://www.cve.org/CVERecord?id=CVE-2026-25990"]}]}]}