{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/document/static-openjpeg","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/recipe/openjpeg"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/openjpeg/static-openjpeg/openjpeg/UNIHASH/document/static-openjpeg","https://rdf.openembedded.org/spdx/3.0/link-name":"0997675ae5723ca61f950b5777f09aa93dad06c4d04d63105ca88a1643ecbb1c"}],"name":"static-openjpeg"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/patch/0/CVE-2023-39327_patch","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0997675ae5723ca61f950b5777f09aa93dad06c4d04d63105ca88a1643ecbb1c/openjpeg/UNIHASH/patch/0/CVE-2023-39327_patch"}],"name":"CVE-2023-39327.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"8557fe81af43b010fdcb93c815d8e825b6cdd1a377d2a9a28946fb0cd044af7a"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/patch/0/CVE-2026-6192_patch","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0997675ae5723ca61f950b5777f09aa93dad06c4d04d63105ca88a1643ecbb1c/openjpeg/UNIHASH/patch/0/CVE-2026-6192_patch"}],"name":"CVE-2026-6192.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"8eb984a53c4432789e5adebafb43ec23ee89e2226aaa9e51fb7cbd17c8f7d00a"}]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/recipe/openjpeg","software_homePage":"http://www.openjpeg.org","software_packageUrl":"pkg:yocto/openembedded-layer/openjpeg@2.5.4","software_packageVersion":"2.5.4","software_sourceInfo":"{\"FILENAME\":\"openjpeg_2.5.4.bb\",\"FILE_LAYERNAME\":\"openembedded-layer\"}","software_primaryPurpose":"specification","creationInfo":"_:CreationInfo1","description":"OpenJPEG library is an open-source JPEG 2000 codec","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0997675ae5723ca61f950b5777f09aa93dad06c4d04d63105ca88a1643ecbb1c/openjpeg/UNIHASH/recipe/openjpeg"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"packageUrl","identifier":"pkg:yocto/openembedded-layer/openjpeg@2.5.4"},{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:openjpeg:2.5.4:*:*:*:*:*:*:*"}],"name":"openjpeg","summary":"openjpeg version 2.5.4-r0"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/relationship/299670b3c1b26c7c2d31ea92af1eccdc","scope":"build","from":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/recipe/openjpeg","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/2d06dc5ba48893c07b2d514d44eaac926ae01d6e22a9beba10fe8f9509b755bd/ninja-native/UNIHASH/recipe/ninja-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/8dfb56d44780959e739edb9d6bbd77950f5e61344b627806be0a9fe45c227665/lcms/UNIHASH/recipe/lcms","http://spdxdocs.org/openembedded-alias/by-doc-hash/a1b7df3bb83b28b57ecabfa7ea24af08c8f009cdaf0eddaeda1550e20b8e7aad/gcc-cross-aarch64/UNIHASH/recipe/gcc-cross-aarch64","http://spdxdocs.org/openembedded-alias/by-doc-hash/a53271b46c4788f718564bf22038b1c5b8ca35aa8e19aad8d5eb884df69219ee/cmake-native/UNIHASH/recipe/cmake-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/c58c168c23f1f2e6fcc9b0baefff221e5e69465f454152fa33c05f569ef3d07a/glibc/UNIHASH/recipe/glibc","http://spdxdocs.org/openembedded-alias/by-doc-hash/d7d96c940f6f795db519baffdbc6d6cde92fbdd6992af42829309081955624d2/libpng/UNIHASH/recipe/libpng","http://spdxdocs.org/openembedded-alias/by-doc-hash/e566e9d50764647375730ed82582046eed4c1855ce7b3073b557fbef31ccac85/gcc-runtime/UNIHASH/recipe/gcc-runtime","http://spdxdocs.org/openembedded-alias/by-doc-hash/e895242ba68d15588c063fcfa2fe35484c4798c09d27c8d0669f39ac92ef3bb0/tiff/UNIHASH/recipe/tiff","http://spdxdocs.org/openembedded-alias/by-doc-hash/f38b6ca69849e7e3f715b534621cf1e02b249d95b1bb50e51f99ccc90444c826/zlib/UNIHASH/recipe/zlib"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0997675ae5723ca61f950b5777f09aa93dad06c4d04d63105ca88a1643ecbb1c/openjpeg/UNIHASH/relationship/299670b3c1b26c7c2d31ea92af1eccdc"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/relationship/3fdc048b92352c31c022109ea346c85e","scope":"build","from":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/vex-fixed/007a51aceeca2b4b5497c96d57e10ade","relationshipType":"patchedBy","to":["http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/patch/0/CVE-2026-6192_patch"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0997675ae5723ca61f950b5777f09aa93dad06c4d04d63105ca88a1643ecbb1c/openjpeg/UNIHASH/relationship/3fdc048b92352c31c022109ea346c85e"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/relationship/429ce512aa4a4f03bfc8226b74ae78e4","from":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/recipe/openjpeg","relationshipType":"hasAssociatedVulnerability","to":["http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/vulnerability/CVE-2023-39327","http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/vulnerability/CVE-2026-6192"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0997675ae5723ca61f950b5777f09aa93dad06c4d04d63105ca88a1643ecbb1c/openjpeg/UNIHASH/relationship/429ce512aa4a4f03bfc8226b74ae78e4"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/relationship/77f6a876fada3439c351528776cefd52","scope":"build","from":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/vex-fixed/051b6964c279b9657cb91877fef07d09","relationshipType":"patchedBy","to":["http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/patch/0/CVE-2023-39327_patch"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0997675ae5723ca61f950b5777f09aa93dad06c4d04d63105ca88a1643ecbb1c/openjpeg/UNIHASH/relationship/77f6a876fada3439c351528776cefd52"}]},{"type":"security_VexFixedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/vex-fixed/007a51aceeca2b4b5497c96d57e10ade","security_statusNotes":"fix-file-included","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/vulnerability/CVE-2026-6192","relationshipType":"fixedIn","to":["http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/recipe/openjpeg"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0997675ae5723ca61f950b5777f09aa93dad06c4d04d63105ca88a1643ecbb1c/openjpeg/UNIHASH/vex-fixed/007a51aceeca2b4b5497c96d57e10ade"}]},{"type":"security_VexFixedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/vex-fixed/051b6964c279b9657cb91877fef07d09","security_statusNotes":"fix-file-included","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/vulnerability/CVE-2023-39327","relationshipType":"fixedIn","to":["http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/recipe/openjpeg"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0997675ae5723ca61f950b5777f09aa93dad06c4d04d63105ca88a1643ecbb1c/openjpeg/UNIHASH/vex-fixed/051b6964c279b9657cb91877fef07d09"}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/vulnerability/CVE-2023-39327","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0997675ae5723ca61f950b5777f09aa93dad06c4d04d63105ca88a1643ecbb1c/openjpeg/UNIHASH/vulnerability/CVE-2023-39327"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2023-39327","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2023-39327","https://www.cve.org/CVERecord?id=CVE-2023-39327"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/b9f984bf0676e9037bc637cde889b378703654605551ff60c7b2434ce34f7afd/vulnerability/CVE-2026-6192","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/0997675ae5723ca61f950b5777f09aa93dad06c4d04d63105ca88a1643ecbb1c/openjpeg/UNIHASH/vulnerability/CVE-2026-6192"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2026-6192","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2026-6192","https://www.cve.org/CVERecord?id=CVE-2026-6192"]}]}]}