{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2026-01-09T09:30:45Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/build/recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/build/recipe"}],"name":"lcms:do_create_spdx:recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/document/build-lcms","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/lcms/build-lcms/lcms/UNIHASH/document/build-lcms","https://rdf.openembedded.org/spdx/3.0/link-name":"03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851"}],"name":"build-lcms"},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/license/3_28_0/MIT","simplelicensing_licenseExpression":"MIT","simplelicensing_licenseListVersion":"3.28.0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/license/3_28_0/MIT"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/relationship/01d8d439fddc360c4e6dec2e3ca9315d","scope":"build","from":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/source/1","http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/source/2","http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/source/3"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/relationship/01d8d439fddc360c4e6dec2e3ca9315d"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/relationship/297e4bce41821d5b848dce4d8f660724","scope":"build","from":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/088df010807b9053eef5bc2c573ee16a6a128bd5ee5beb9c85b03f21313cbb81/libtool-cross/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/0a457f562b7a1033544d0b59a5493c2ded12899b4403ae0535f13f64d29d6dc2/glibc/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/6c5a4e9a261938fb7ea4f39ab4a1d11fc152a8b6c66e09dd3baa023eb730f2e0/automake-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/7a78f5c3619f83503d767555cd413e3cdc2b3f7751dd203143482f2eb28fed27/gcc-cross-aarch64/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/8285387730cbd74330865a33ff2b18273f9baefb2d07ea073218c2bd0837df43/libtool-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110/tiff/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/e80f1d61f4749e663e80a4dfb25ebb1127b5f50600d3065de7ed91030942a1ef/gcc-runtime/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/f1955e9d3f04bb4f8ef71d69157bc14b73f0861bb636dae137c0194d1e3f15f3/autoconf-native/UNIHASH/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/relationship/297e4bce41821d5b848dce4d8f660724"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/relationship/3b9e4e3fc1d19182f886f3eda89b6ed5","from":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/license/3_28_0/MIT"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/relationship/3b9e4e3fc1d19182f886f3eda89b6ed5"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/relationship/9239adc116bb749dcf3b652ebbb3a699","from":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/license/3_28_0/MIT"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/relationship/9239adc116bb749dcf3b652ebbb3a699"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/relationship/a13752c1ce15bee29813b675e3a832f2","from":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/source/3","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/license/3_28_0/MIT"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/relationship/a13752c1ce15bee29813b675e3a832f2"}]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/source/1","software_downloadLocation":"https://downloads.sourceforge.net/lcms/lcms2-2.18.tar.gz","software_primaryPurpose":"source","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/source/1"}],"name":"lcms2-2.18.tar.gz","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"ee67be3566f459362c1ee094fde2c159d33fa0390aa4ed5f5af676f9e5004347"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/source/2","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/source/2"}],"name":"CVE-2026-41254_1.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"9b6b9ea8d17db7b5dfc3c0a3739d70ea2ca7b564ff55d457f5b6126e3be19118"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/lcms-e2497943-f57f-524c-8226-3c7d97a7179c/98981ff5914e627f6b092ab4569409a824233d823c55d29268225911145420fc/source/3","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/source/3"}],"name":"CVE-2026-41254_2.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"c7f97d37654c55f881c26d41e997cc3c50816a13d45e509489bb1932510b99f4"}]}]}