{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-09-11T10:54:33Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/build/recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110/tiff/UNIHASH/build/recipe"}],"name":"tiff:do_create_spdx:recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/document/build-tiff","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/tiff/build-tiff/tiff/UNIHASH/document/build-tiff","https://rdf.openembedded.org/spdx/3.0/link-name":"9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110"}],"name":"build-tiff"},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/license/3_28_0/libtiff_AND_BSD-4_3TAHOE","simplelicensing_licenseExpression":"libtiff AND BSD-4.3TAHOE","simplelicensing_licenseListVersion":"3.28.0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110/tiff/UNIHASH/license/3_28_0/libtiff_AND_BSD-4_3TAHOE"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/relationship/4f5521c071482da4b34e1e59c8cd545c","scope":"build","from":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/088df010807b9053eef5bc2c573ee16a6a128bd5ee5beb9c85b03f21313cbb81/libtool-cross/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/0a457f562b7a1033544d0b59a5493c2ded12899b4403ae0535f13f64d29d6dc2/glibc/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/1ecca73167a6b5481ac3824a530a996661f44f1ea217c210660d3ebcc056f7b6/xz/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/6c5a4e9a261938fb7ea4f39ab4a1d11fc152a8b6c66e09dd3baa023eb730f2e0/automake-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/7a78f5c3619f83503d767555cd413e3cdc2b3f7751dd203143482f2eb28fed27/gcc-cross-aarch64/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/8285387730cbd74330865a33ff2b18273f9baefb2d07ea073218c2bd0837df43/libtool-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/c5b1492542e994feb82748f20d87d53d450d25f37e2cb93b8d067c58b1f62ce5/zlib/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/e80f1d61f4749e663e80a4dfb25ebb1127b5f50600d3065de7ed91030942a1ef/gcc-runtime/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/f1955e9d3f04bb4f8ef71d69157bc14b73f0861bb636dae137c0194d1e3f15f3/autoconf-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/f789cfee8903071de25b0ead6ac6be521cc269e3d78c275a1d430ebfca655a76/libjpeg-turbo/UNIHASH/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110/tiff/UNIHASH/relationship/4f5521c071482da4b34e1e59c8cd545c"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/relationship/5cbcb850db1711e61988eb75b4b2d9be","scope":"build","from":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/source/1","http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/source/2"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110/tiff/UNIHASH/relationship/5cbcb850db1711e61988eb75b4b2d9be"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/relationship/7c993a9ca01b06e41005ba28fa5dead4","from":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110/tiff/UNIHASH/license/3_28_0/libtiff_AND_BSD-4_3TAHOE"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110/tiff/UNIHASH/relationship/7c993a9ca01b06e41005ba28fa5dead4"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/relationship/bae5a2a28f5798859b06d6064e1b45a5","from":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110/tiff/UNIHASH/license/3_28_0/libtiff_AND_BSD-4_3TAHOE"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110/tiff/UNIHASH/relationship/bae5a2a28f5798859b06d6064e1b45a5"}]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/source/1","software_downloadLocation":"http://download.osgeo.org/libtiff/tiff-4.7.1.tar.gz","software_primaryPurpose":"source","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110/tiff/UNIHASH/source/1"}],"name":"tiff-4.7.1.tar.gz","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"f698d94f3103da8ca7438d84e0344e453fe0ba3b7486e04c5bf7a9a3fabe9b69"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/tiff-a45673ec-b331-5711-b633-464a29e87e03/6088fe3bfe777bd86205123b201d8acce9750f2d29069d6612a4f8035959e522/source/2","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/9a98c5445dd37f782ef0abfd3a3f82b881519383bb1b934e7e1f507a7d573110/tiff/UNIHASH/source/2"}],"name":"CVE-2026-4775.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"aeb4d117572b93d8146c4595f8ba6066eae3156e23cc82696a09709d1c3afdae"}]}]}