{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2025-07-20T16:15:44Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/document/package-nativesdk-libpixman-1-dev","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/nativesdk-pixman/package-nativesdk-libpixman-1-dev/nativesdk-pixman/UNIHASH/document/package-nativesdk-libpixman-1-dev","https://rdf.openembedded.org/spdx/3.0/link-name":"ce917a3ead8dd9b90f797c190e4cbc3335bafccf640cda9371ea2bf4ba66f8c7"}],"name":"package-nativesdk-libpixman-1-dev","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev","creationInfo":"_:CreationInfo0","description":"Pixman provides a library for manipulating pixel regions -- a set of Y-X banded rectangles, image compositing using the Porter/Duff model and implicit mask generation for geometric primitives including trapezoids, triangles, and rectangles.  This package contains symbolic links, header files, and related items necessary for software development.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ce917a3ead8dd9b90f797c190e4cbc3335bafccf640cda9371ea2bf4ba66f8c7/nativesdk-pixman/UNIHASH/package/nativesdk-libpixman-1-dev"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:pixman:0.46.4:*:*:*:*:*:*:*"}],"name":"nativesdk-libpixman-1-dev","summary":"Pixman: Pixel Manipulation library - Development files","software_primaryPurpose":"install","software_homePage":"http://www.pixman.org","software_packageVersion":"0.46.4"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev/file/1","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ce917a3ead8dd9b90f797c190e4cbc3335bafccf640cda9371ea2bf4ba66f8c7/nativesdk-pixman/UNIHASH/package/nativesdk-libpixman-1-dev/file/1"}],"name":"usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-tdxsdk-linux/usr/include/pixman-1/pixman-version.h","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"eebbff4b66cbcc98b3ffa16c68a919d4a16dfcffb86cd1fb85faea4f07bcd76b"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev/file/2","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ce917a3ead8dd9b90f797c190e4cbc3335bafccf640cda9371ea2bf4ba66f8c7/nativesdk-pixman/UNIHASH/package/nativesdk-libpixman-1-dev/file/2"}],"name":"usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-tdxsdk-linux/usr/include/pixman-1/pixman.h","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"af49363cee8b2340a215e1ea477761c2c867905c17abe129e5778bfc65033f53"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev/file/3","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ce917a3ead8dd9b90f797c190e4cbc3335bafccf640cda9371ea2bf4ba66f8c7/nativesdk-pixman/UNIHASH/package/nativesdk-libpixman-1-dev/file/3"}],"name":"usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-tdxsdk-linux/usr/lib/pkgconfig/pixman-1.pc","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"d4d268ec0322b016ceefdba470685f7606506d970f55154666c37eae386946bd"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/relationship/4f627ff96ff3da4119cc7fa3cc255a62","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ce917a3ead8dd9b90f797c190e4cbc3335bafccf640cda9371ea2bf4ba66f8c7/nativesdk-pixman/UNIHASH/relationship/4f627ff96ff3da4119cc7fa3cc255a62"}],"from":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/2c969f242f20471a9b36c7f6316a0175ceaa0c4a479c4a4f6d4a18133c207efa/nativesdk-pixman/UNIHASH/license/3_27_0/MIT_AND_LicenseRef-PD/cd3f19b3e49915bac1b40bf8c161725e"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/relationship/539b53735bf4656d7e09816603a0d0d0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ce917a3ead8dd9b90f797c190e4cbc3335bafccf640cda9371ea2bf4ba66f8c7/nativesdk-pixman/UNIHASH/relationship/539b53735bf4656d7e09816603a0d0d0"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/2c969f242f20471a9b36c7f6316a0175ceaa0c4a479c4a4f6d4a18133c207efa/nativesdk-pixman/UNIHASH/build/recipe","relationshipType":"hasOutput","to":["http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/relationship/713064922277548da31bf1f3fd41655f","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ce917a3ead8dd9b90f797c190e4cbc3335bafccf640cda9371ea2bf4ba66f8c7/nativesdk-pixman/UNIHASH/relationship/713064922277548da31bf1f3fd41655f"}],"from":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev","relationshipType":"hasAssociatedVulnerability","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/2c969f242f20471a9b36c7f6316a0175ceaa0c4a479c4a4f6d4a18133c207efa/nativesdk-pixman/UNIHASH/vulnerability/CVE-2023-37769"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/relationship/a9b6600832c043127d6766f98df851ef","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ce917a3ead8dd9b90f797c190e4cbc3335bafccf640cda9371ea2bf4ba66f8c7/nativesdk-pixman/UNIHASH/relationship/a9b6600832c043127d6766f98df851ef"}],"from":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev","relationshipType":"contains","to":["http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev/file/1","http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev/file/2","http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev/file/3"]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/vex-not-affected/db271c4a7afc6805281c7ea26a8f3dbd","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/ce917a3ead8dd9b90f797c190e4cbc3335bafccf640cda9371ea2bf4ba66f8c7/nativesdk-pixman/UNIHASH/vex-not-affected/db271c4a7afc6805281c7ea26a8f3dbd"}],"from":"http://spdxdocs.org/openembedded-alias/by-doc-hash/2c969f242f20471a9b36c7f6316a0175ceaa0c4a479c4a4f6d4a18133c207efa/nativesdk-pixman/UNIHASH/vulnerability/CVE-2023-37769","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/nativesdk-pixman-1247bdb8-df2b-5f76-9b32-42e0db591440/e6c366c5b5a1bb53dfecdda4cc005e0a4b33e24118fab632c272608cb580cd30/package/nativesdk-libpixman-1-dev"],"security_vexVersion":"1.0.0","security_impactStatement":"stress-test is an uninstalled test","security_justificationType":"vulnerableCodeNotPresent"}]}