{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-09-30T14:48:33Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/build/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/build/recipe"}],"name":"nativesdk-cmake:do_create_spdx:recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/document/recipe-nativesdk-cmake","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/nativesdk-cmake/recipe-nativesdk-cmake/nativesdk-cmake/UNIHASH/document/recipe-nativesdk-cmake","https://rdf.openembedded.org/spdx/3.0/link-name":"f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467"}],"name":"recipe-nativesdk-cmake","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/build/recipe"]},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/license/3_27_0/BSD-3-Clause_AND_BSD-1-Clause_AND_MIT","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/license/3_27_0/BSD-3-Clause_AND_BSD-1-Clause_AND_MIT"}],"simplelicensing_licenseExpression":"BSD-3-Clause AND BSD-1-Clause AND MIT","simplelicensing_licenseListVersion":"3.27.0"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/relationship/0aca2832b24a3d5ae34935010bb6a44e","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/relationship/0aca2832b24a3d5ae34935010bb6a44e"}],"from":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/license/3_27_0/BSD-3-Clause_AND_BSD-1-Clause_AND_MIT"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/relationship/45b75f1b865bd283d183d785bf9291c2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/relationship/45b75f1b865bd283d183d785bf9291c2"}],"from":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/license/3_27_0/BSD-3-Clause_AND_BSD-1-Clause_AND_MIT"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/relationship/4cf8fc7b241adaac65c87aa000e4b140","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/relationship/4cf8fc7b241adaac65c87aa000e4b140"}],"from":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/1","http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/2","http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/3","http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/4","http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/5","http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/6"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/relationship/9c88bec63bc89bc81d5d61c2262b1e4e","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/relationship/9c88bec63bc89bc81d5d61c2262b1e4e"}],"from":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/3","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/license/3_27_0/BSD-3-Clause_AND_BSD-1-Clause_AND_MIT"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/relationship/b62b97ce973e4f7a2e0c2521a8b357bb","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/relationship/b62b97ce973e4f7a2e0c2521a8b357bb"}],"from":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/4","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/license/3_27_0/BSD-3-Clause_AND_BSD-1-Clause_AND_MIT"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/relationship/d8cc767dbdcbfcac20900299117bfa3c","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/relationship/d8cc767dbdcbfcac20900299117bfa3c"}],"from":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/5","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/license/3_27_0/BSD-3-Clause_AND_BSD-1-Clause_AND_MIT"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/relationship/dc5d14577bc3f534a578aa534210f306","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/relationship/dc5d14577bc3f534a578aa534210f306"}],"from":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/6","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/license/3_27_0/BSD-3-Clause_AND_BSD-1-Clause_AND_MIT"]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/relationship/f0c744f0834cb612719a71dfe921c6be","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/relationship/f0c744f0834cb612719a71dfe921c6be"}],"from":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/2fc10f87a07bb3a4aef44fa907a6c5788dba6dc3ec7aa1d1af472f28900a4e67/nativesdk-gcc-runtime/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/37c8b9845fa5e3ebc400d1085d67e3bdc45ffdc2be8a5d6b2db5fa94c012de18/chrpath-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/4f62db82c84e2ab0333c747e2c260bb2dd948a4df17de6068d9999ba1c367223/nativesdk-bzip2/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/4f85d23f04f7107632034fe7f9a7f6aa396ad03a503af13cde3f455b90606f51/ninja-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/650711aa607c4b059a0fe6a86199dab8a58bea8d9aa33a49fe94f97aae48fd63/gcc-crosssdk-x86_64-tdxsdk-linux/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/7531eb4c8791c4f3be6887a6834329d3c77689a56ab5127c12e56ce95bf42d61/nativesdk-ncurses/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/880f6fb0cfe241d0edc29c447fa6f730da4934248fbffacd6c61ec8003b6fe10/nativesdk-zlib/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/b45fb114570107872509acc9ffece1455855723fe6c103e8da3abfd72c3d4050/nativesdk-curl/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/ea9241488d8cc73eb036ec3a78848c88d63389350ba1967033052e37f3be7efd/cmake-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/ec95d1050dd09a8f8a75494b81742fe37717b475d9c126ce57fe8557b98d5881/nativesdk-glibc/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/ef99174b849b93765446c3e5d0e0fab87c4f4064917db33d4587b7f5b8d32d2b/nativesdk-libarchive/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/efa17839f654aad9bc68f1316a5a627dc114ac2a5eba93de927a29767706b436/nativesdk-expat/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/f36ad35d82c68d72687d9fdd8d332d42378dd51729b9455976b11306d20b6a0c/nativesdk-xz/UNIHASH/build/recipe"],"scope":"build"},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/1","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/source/1"}],"name":"cmake-4.1.2.tar.gz","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"643f04182b7ba323ab31f526f785134fb79cba3188a852206ef0473fee282a15"}],"software_primaryPurpose":"source","software_downloadLocation":"https://cmake.org/files/v4.1/cmake-4.1.2.tar.gz"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/source/2"}],"name":"CVE-2025-9301.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"ed0a86e3c55ddf8f0f8b3b4cc34c7943fffb2da59ad529c816ebe89768c22e1b"}],"software_primaryPurpose":"patch"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/3","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/source/3"}],"name":"OEToolchainConfig.cmake","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"5b05ea86e7b6cad915a820ae80833be612623afcfa11740e6215ba8c583842fd"}],"software_primaryPurpose":"source"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/4","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/source/4"}],"name":"SDKToolchainConfig.cmake.template","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"b1c1dcc9a216291d372161a5affa81b91823c321da16aea75402297d143647f0"}],"software_primaryPurpose":"source"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/5","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/source/5"}],"name":"cmake-setup.py","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"deccb9f13211e030ec34abd0852be29b7110587e513813e4190917151106a4b6"}],"software_primaryPurpose":"source"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/source/6","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/source/6"}],"name":"environment.d-cmake.sh","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"5650c533024e96420326cfd55a5c5bbddd8bc3cc8670c21caa83a30604467722"}],"software_primaryPurpose":"source"},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/vulnerability/CVE-2016-10642","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/vulnerability/CVE-2016-10642"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2016-10642","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2016-10642","https://www.cve.org/CVERecord?id=CVE-2016-10642"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/nativesdk-cmake-b0f4e194-eb22-5b94-977f-f1badd8d0a9b/b858144a6aa8950bb3898726c835a86c3d276bcefcdc1d5c5d0d2c9e402c852e/vulnerability/CVE-2025-9301","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f4efc225364dee792e70c469d53e1476e063d0270d9a01c09ce3fb8b71130467/nativesdk-cmake/UNIHASH/vulnerability/CVE-2025-9301"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2025-9301","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2025-9301","https://www.cve.org/CVERecord?id=CVE-2025-9301"]}]}]}