{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2026-03-11T06:47:06Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/build/recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/build/recipe"}],"name":"curl:do_create_spdx:recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/document/build-curl","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/curl/build-curl/curl/UNIHASH/document/build-curl","https://rdf.openembedded.org/spdx/3.0/link-name":"527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c"}],"name":"build-curl"},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/license/3_28_0/curl","simplelicensing_licenseExpression":"curl","simplelicensing_licenseListVersion":"3.28.0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/license/3_28_0/curl"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/relationship/29ca3272baf0b575a54f9cc33b5e54a7","from":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/4","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/license/3_28_0/curl"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/relationship/29ca3272baf0b575a54f9cc33b5e54a7"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/relationship/4d073d2364310cd92f313d4ee20ba3c0","scope":"build","from":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/1","http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/2","http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/3","http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/4","http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/5","http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/6"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/relationship/4d073d2364310cd92f313d4ee20ba3c0"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/relationship/4e11f7bf2bd9018e0f221834f8202c0e","from":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/license/3_28_0/curl"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/relationship/4e11f7bf2bd9018e0f221834f8202c0e"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/relationship/73f15cbee77044cf460ff3253d00882d","from":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/5","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/license/3_28_0/curl"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/relationship/73f15cbee77044cf460ff3253d00882d"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/relationship/7fdf40f40731a2b1360db47df219026e","from":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/3","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/license/3_28_0/curl"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/relationship/7fdf40f40731a2b1360db47df219026e"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/relationship/9efcdc3b1df049d6efa6d9bfe4cee6b5","from":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/license/3_28_0/curl"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/relationship/9efcdc3b1df049d6efa6d9bfe4cee6b5"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/relationship/d6aaa86eb4bf3724289dbd0b1f16c6f7","scope":"build","from":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/088df010807b9053eef5bc2c573ee16a6a128bd5ee5beb9c85b03f21313cbb81/libtool-cross/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/0a457f562b7a1033544d0b59a5493c2ded12899b4403ae0535f13f64d29d6dc2/glibc/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/504d1373e07d584b332795292a5500364753fe56ff818f418fdde4b85a4a0d3e/libidn2/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/6c5a4e9a261938fb7ea4f39ab4a1d11fc152a8b6c66e09dd3baa023eb730f2e0/automake-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/7a78f5c3619f83503d767555cd413e3cdc2b3f7751dd203143482f2eb28fed27/gcc-cross-aarch64/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/8285387730cbd74330865a33ff2b18273f9baefb2d07ea073218c2bd0837df43/libtool-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/b4522e64f87bfdee8e07d80dbc4a9929042291a0eac8ff505abe745172b1ce3c/openssl/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/c5b1492542e994feb82748f20d87d53d450d25f37e2cb93b8d067c58b1f62ce5/zlib/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/d9d173f50107a0336af392c2b55397194c894ed77e49edd73645dd9dc78e84a4/opkg-utils/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/df89af7bd78400ccbfc0a15b5cffe6954b767d69148e84a74ddc967574f3daab/pkgconf-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/e80f1d61f4749e663e80a4dfb25ebb1127b5f50600d3065de7ed91030942a1ef/gcc-runtime/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/f1955e9d3f04bb4f8ef71d69157bc14b73f0861bb636dae137c0194d1e3f15f3/autoconf-native/UNIHASH/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/relationship/d6aaa86eb4bf3724289dbd0b1f16c6f7"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/relationship/f402adc5252dd95afd32729194cd01fb","from":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/6","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/license/3_28_0/curl"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/relationship/f402adc5252dd95afd32729194cd01fb"}]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/1","software_downloadLocation":"https://curl.se/download/curl-8.19.0.tar.xz","software_primaryPurpose":"source","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/source/1"}],"name":"curl-8.19.0.tar.xz","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"4eb41489790d19e190d7ac7e18e82857cdd68af8f4e66b292ced562d333f11df"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/2","software_primaryPurpose":"source","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/source/2"}],"name":"run-ptest","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"69c401125445e90df2642d5b900d07bcbfffabd4f9b3f85950a598529e9efa8d"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/3","software_primaryPurpose":"source","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/source/3"}],"name":"disable-tests","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/4","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/source/4"}],"name":"no-test-timeout.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"cc6c9dd25c3fd51fd0f75b4603e52455fa4914712ff60fcc1d777377f8fbfb5d"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/5","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/source/5"}],"name":"CVE-2026-6276.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"dd2850be5850765257b339ea48e82d9a40ed5a6788d169a1e7fc95e009469df5"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/curl-f9b42ec2-2708-5790-94d6-3b3efbda716f/f2747b12f416c81f0fcff583fc02b2ce50eb4c6931bcaaa00109a13822736f6a/source/6","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/527263f348943e7554a579227fc2ca0571f8f1acf0b60e87b1be17d347be9d8c/curl/UNIHASH/source/6"}],"name":"mbedtls.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"8701dd95382e0f88d3fdf9a51db19c1ab900525d98a9c8f10a0e083cc8ae7109"}]}]}