{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-09-11T10:54:33Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/build/recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7aa4368a9e921cc5cd8543730f038e876c257d6e362513e04b3f1cb38555d5ce/tiff-native/UNIHASH/build/recipe"}],"name":"tiff-native:do_create_spdx:recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/document/build-tiff-native","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/tiff-native/build-tiff-native/tiff-native/UNIHASH/document/build-tiff-native","https://rdf.openembedded.org/spdx/3.0/link-name":"7aa4368a9e921cc5cd8543730f038e876c257d6e362513e04b3f1cb38555d5ce"},{"type":"https://rdf.openembedded.org/spdx/3.0/document-extension","https://rdf.openembedded.org/spdx/3.0/is-native":true}],"name":"build-tiff-native"},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/license/3_28_0/libtiff_AND_BSD-4_3TAHOE","simplelicensing_licenseExpression":"libtiff AND BSD-4.3TAHOE","simplelicensing_licenseListVersion":"3.28.0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7aa4368a9e921cc5cd8543730f038e876c257d6e362513e04b3f1cb38555d5ce/tiff-native/UNIHASH/license/3_28_0/libtiff_AND_BSD-4_3TAHOE"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/relationship/3a26b779151d0f9c7ceddd0b1d059300","from":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/7aa4368a9e921cc5cd8543730f038e876c257d6e362513e04b3f1cb38555d5ce/tiff-native/UNIHASH/license/3_28_0/libtiff_AND_BSD-4_3TAHOE"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7aa4368a9e921cc5cd8543730f038e876c257d6e362513e04b3f1cb38555d5ce/tiff-native/UNIHASH/relationship/3a26b779151d0f9c7ceddd0b1d059300"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/relationship/686cdf6e010fe99e720427fa6aec8cec","scope":"build","from":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/source/1","http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/source/2"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7aa4368a9e921cc5cd8543730f038e876c257d6e362513e04b3f1cb38555d5ce/tiff-native/UNIHASH/relationship/686cdf6e010fe99e720427fa6aec8cec"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/relationship/aab6dc5c9fac6f5d349032a0d478ae7f","scope":"build","from":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/48f93784357609ad5cce240a9fc1f0a545d3f386ea7a4016c314fcb50a6ac085/zlib-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/4a2506a2027dee01354a61e97e6856f7775fb97b4a3bca867d4b30573a427767/libjpeg-turbo-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/6839335b56ebe49612d6e09193cd7d7e821692dbf23eefd728908aa82183d7c5/xz-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/6c5a4e9a261938fb7ea4f39ab4a1d11fc152a8b6c66e09dd3baa023eb730f2e0/automake-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/8285387730cbd74330865a33ff2b18273f9baefb2d07ea073218c2bd0837df43/libtool-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/f1955e9d3f04bb4f8ef71d69157bc14b73f0861bb636dae137c0194d1e3f15f3/autoconf-native/UNIHASH/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7aa4368a9e921cc5cd8543730f038e876c257d6e362513e04b3f1cb38555d5ce/tiff-native/UNIHASH/relationship/aab6dc5c9fac6f5d349032a0d478ae7f"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/relationship/e8b7d9622378f7c880ceb21c03820b2f","from":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/7aa4368a9e921cc5cd8543730f038e876c257d6e362513e04b3f1cb38555d5ce/tiff-native/UNIHASH/license/3_28_0/libtiff_AND_BSD-4_3TAHOE"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7aa4368a9e921cc5cd8543730f038e876c257d6e362513e04b3f1cb38555d5ce/tiff-native/UNIHASH/relationship/e8b7d9622378f7c880ceb21c03820b2f"}]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/source/1","software_downloadLocation":"http://download.osgeo.org/libtiff/tiff-4.7.1.tar.gz","software_primaryPurpose":"source","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7aa4368a9e921cc5cd8543730f038e876c257d6e362513e04b3f1cb38555d5ce/tiff-native/UNIHASH/source/1"}],"name":"tiff-4.7.1.tar.gz","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"f698d94f3103da8ca7438d84e0344e453fe0ba3b7486e04c5bf7a9a3fabe9b69"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/tiff-native-746062fa-bb59-5661-9d99-7b64659fe772/683570a56347df675db668a8b9b63bae6a8d2b9a39e6b363e78e96af761fe36f/source/2","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7aa4368a9e921cc5cd8543730f038e876c257d6e362513e04b3f1cb38555d5ce/tiff-native/UNIHASH/source/2"}],"name":"CVE-2026-4775.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"aeb4d117572b93d8146c4595f8ba6066eae3156e23cc82696a09709d1c3afdae"}]}]}