{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-09-20T17:46:23Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/build/recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/build/recipe"}],"name":"openjpeg:do_create_spdx:recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/document/build-openjpeg","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/openjpeg/build-openjpeg/openjpeg/UNIHASH/document/build-openjpeg","https://rdf.openembedded.org/spdx/3.0/link-name":"3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912"}],"name":"build-openjpeg"},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/license/3_28_0/BSD-2-Clause","simplelicensing_licenseExpression":"BSD-2-Clause","simplelicensing_licenseListVersion":"3.28.0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/license/3_28_0/BSD-2-Clause"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/relationship/33588ca5af84103689aed131f5aee9a9","from":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/license/3_28_0/BSD-2-Clause"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/relationship/33588ca5af84103689aed131f5aee9a9"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/relationship/4058b0ec6401962902a7932ba9ab46a4","scope":"build","from":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/03e5c7f11c43cf6096122c496d276fa9dc74fd5ab6ef50cdc25f138aab0f6851/lcms/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/0a457f562b7a1033544d0b59a5493c2ded12899b4403ae0535f13f64d29d6dc2/glibc/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/59360d5a19984050777815495c76bc8b1346cabf1acc9e3df7c8a7b6aa25fa1a/ninja-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/75d04332dc12c0b92e9afcaf2a744718b1179bd896a11ec482551f6316298926/libpng/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/7a78f5c3619f83503d767555cd413e3cdc2b3f7751dd203143482f2eb28fed27/gcc-cross-aarch64/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110/tiff/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/c5b1492542e994feb82748f20d87d53d450d25f37e2cb93b8d067c58b1f62ce5/zlib/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/d2925f29fd1150f76a415634fa33227ebaf20366062b7916e6b691b70245b6c0/cmake-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/e80f1d61f4749e663e80a4dfb25ebb1127b5f50600d3065de7ed91030942a1ef/gcc-runtime/UNIHASH/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/relationship/4058b0ec6401962902a7932ba9ab46a4"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/relationship/45af746cdb95d914bcac05e67675de6f","scope":"build","from":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/source/1","http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/source/2","http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/source/3","http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/source/4"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/relationship/45af746cdb95d914bcac05e67675de6f"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/relationship/51840b0498ce41d0bd788fbc88cbde05","from":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/source/4","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/license/3_28_0/BSD-2-Clause"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/relationship/51840b0498ce41d0bd788fbc88cbde05"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/relationship/619213bdf7f01618d2c02acb8c43863b","from":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/license/3_28_0/BSD-2-Clause"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/relationship/619213bdf7f01618d2c02acb8c43863b"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/relationship/81f8a948ed90eaa801b5da9d5b3667b1","from":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/source/3","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/license/3_28_0/BSD-2-Clause"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/relationship/81f8a948ed90eaa801b5da9d5b3667b1"}]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/source/1","software_downloadLocation":"git+https://github.com/uclouvain/openjpeg.git@6c4a29b00211eb0430fa0e5e890f1ce5c80f409f","software_packageUrl":"pkg:github/uclouvain/openjpeg@6c4a29b00211eb0430fa0e5e890f1ce5c80f409f@6c4a29b00211eb0430fa0e5e890f1ce5c80f409f","software_packageVersion":"6c4a29b00211eb0430fa0e5e890f1ce5c80f409f","software_primaryPurpose":"source","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/source/1"}],"externalRef":[{"type":"ExternalRef","externalRefType":"vcs","locator":["https://github.com/uclouvain/openjpeg.git"]}],"name":"github.com.uclouvain.openjpeg.git"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/source/2","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/source/2"}],"name":"0001-Do-not-ask-cmake-to-export-binaries-they-don-t-make-.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"dde47e039405408d491d6b4242e696a97e28d072586cf8e112d963d52a8993ad"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/source/3","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/source/3"}],"name":"CVE-2023-39327.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"8557fe81af43b010fdcb93c815d8e825b6cdd1a377d2a9a28946fb0cd044af7a"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/openjpeg-b966cb04-2c56-5ae9-ab72-4831cb377586/0318588ba22cd144e7a8624837086292e72c040d05455bce3b257abc6d5a8228/source/4","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/3354c66731cb2f55ff033003dfb33c6600d390ce205e93c45554c904a55a9912/openjpeg/UNIHASH/source/4"}],"name":"CVE-2026-6192.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"8eb984a53c4432789e5adebafb43ec23ee89e2226aaa9e51fb7cbd17c8f7d00a"}]}]}