{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-04-09T11:13:34Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/build/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/build/recipe"}],"name":"coreutils-native:do_create_spdx:recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/document/recipe-coreutils-native","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/coreutils-native/recipe-coreutils-native/coreutils-native/UNIHASH/document/recipe-coreutils-native","https://rdf.openembedded.org/spdx/3.0/link-name":"ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e"},{"type":"https://rdf.openembedded.org/spdx/3.0/document-extension","https://rdf.openembedded.org/spdx/3.0/is-native":true}],"name":"recipe-coreutils-native","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/build/recipe"]},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/license/3_27_0/GPL-3_0-or-later","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/license/3_27_0/GPL-3_0-or-later"}],"simplelicensing_licenseExpression":"GPL-3.0-or-later","simplelicensing_licenseListVersion":"3.27.0"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/relationship/252f34ec9343faae24a45b9722896f9f","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/relationship/252f34ec9343faae24a45b9722896f9f"}],"from":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/09bf2caa6e4f30c9f8183e4fc7497dd7bd4d0aa25a78c2e0b14f260b7bf30be8/texinfo-dummy-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/51f21a35aa2175f4c35b15314273194dd186b8b168d3232a993dbb98fe0c50c8/attr-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/9cc45e3603cae7ce135c3216a9e5faccb8a7cbcf341c43bd07e3e333a6d2aca4/automake-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/e3574ba33813b0fffaccba318bb72f872a08cc856c8ed034d0e7375c333b4c40/gettext-minimal-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/e58947bda9390c1359ba3b69716d4710ef9f6f8d8090f3cd9cfb0e5f7ccedf76/libtool-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/edde7694b89e3f5c36b6cf8d7fdf96a4469d0409cf4310d38a40b966599057b5/autoconf-native/UNIHASH/build/recipe"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/relationship/3c02e0833d3b75ef0c5c33ebe512ba41","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/relationship/3c02e0833d3b75ef0c5c33ebe512ba41"}],"from":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/license/3_27_0/GPL-3_0-or-later"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/relationship/87c74cd3ae6fee8d7622b2e562451428","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/relationship/87c74cd3ae6fee8d7622b2e562451428"}],"from":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/source/3","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/license/3_27_0/GPL-3_0-or-later"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/relationship/957b74582a40f43fa24c0478191fcc2d","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/relationship/957b74582a40f43fa24c0478191fcc2d"}],"from":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/license/3_27_0/GPL-3_0-or-later"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/relationship/9f114a17e235b1c0af5d2077aaed9161","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/relationship/9f114a17e235b1c0af5d2077aaed9161"}],"from":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/source/4","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/license/3_27_0/GPL-3_0-or-later"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/relationship/e6f684de562cc59a1b14a54ab51337bc","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/relationship/e6f684de562cc59a1b14a54ab51337bc"}],"from":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/source/1","http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/source/2","http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/source/3","http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/source/4"],"scope":"build"},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/source/1","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/source/1"}],"name":"coreutils-9.7.tar.xz","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"e8bb26ad0293f9b5a1fc43fb42ba970e312c66ce92c1b0b16713d7500db251bf"}],"software_primaryPurpose":"source","software_downloadLocation":"https://ftpmirror.gnu.org/gnu/coreutils/coreutils-9.7.tar.xz"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/source/2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/source/2"}],"name":"remove-usr-local-lib-from-m4.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"c097d2fae91a97b3112cdc1cfe261cc64c39496cd091f5cc7b3ff0f51e46464f"}],"software_primaryPurpose":"patch"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/source/3","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/source/3"}],"name":"0001-sort-fix-buffer-under-read-CWE-127.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"4f60784dc0e2b22b370ecf7d22a549d9d8e7c928476935edb755113ee51d9fa8"}],"software_primaryPurpose":"patch"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/source/4","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/source/4"}],"name":"run-ptest","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"45e9946c5cfc97b48471177b93898f4f656dd455fb49952f3b465ae6b899cc59"}],"software_primaryPurpose":"source"},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/vulnerability/CVE-2016-2781","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/vulnerability/CVE-2016-2781"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2016-2781","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2016-2781","https://www.cve.org/CVERecord?id=CVE-2016-2781"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/coreutils-native-aa98a606-ec72-5a7f-be04-f7b6b6fd6b16/f8b7fc9002e95196d8b552a6769048e929b860b07b169e53a737b64ed7c14886/vulnerability/CVE-2025-5278","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ef7dae042d9ce41762e38addd422528d2dcc50d6eb0cc9da5b9406589682793e/coreutils-native/UNIHASH/vulnerability/CVE-2025-5278"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2025-5278","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2025-5278","https://www.cve.org/CVERecord?id=CVE-2025-5278"]}]}]}