{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2026-03-12T09:13:53Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/build/recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/build/recipe"}],"name":"libsolv-native:do_create_spdx:recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/document/build-libsolv-native","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/libsolv-native/build-libsolv-native/libsolv-native/UNIHASH/document/build-libsolv-native","https://rdf.openembedded.org/spdx/3.0/link-name":"1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765"},{"type":"https://rdf.openembedded.org/spdx/3.0/document-extension","https://rdf.openembedded.org/spdx/3.0/is-native":true}],"name":"build-libsolv-native"},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/license/3_28_0/BSD-3-Clause","simplelicensing_licenseExpression":"BSD-3-Clause","simplelicensing_licenseListVersion":"3.28.0","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/license/3_28_0/BSD-3-Clause"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/relationship/0db7744d6906bdeb7c34b61e0d538f8b","from":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/license/3_28_0/BSD-3-Clause"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/relationship/0db7744d6906bdeb7c34b61e0d538f8b"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/relationship/5cef13fe58a78eb17590fd720d473d5a","scope":"build","from":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/source/1","http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/source/2","http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/source/3","http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/source/4"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/relationship/5cef13fe58a78eb17590fd720d473d5a"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/relationship/93299ce94cc9deae4c32fb1f6736fa40","from":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/source/3","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/license/3_28_0/BSD-3-Clause"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/relationship/93299ce94cc9deae4c32fb1f6736fa40"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/relationship/a4d4f42d49b64dc2d3b1240b6870a981","scope":"build","from":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/3c3c11a2ff908b5fcc450de9cffefeafe4c69601821103509789e1c0c6a93f40/zstd-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/48f93784357609ad5cce240a9fc1f0a545d3f386ea7a4016c314fcb50a6ac085/zlib-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/59360d5a19984050777815495c76bc8b1346cabf1acc9e3df7c8a7b6aa25fa1a/ninja-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/d2925f29fd1150f76a415634fa33227ebaf20366062b7916e6b691b70245b6c0/cmake-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/e13b9bb488344d5b8f4d49f22a53f548993a7c6ed715c6d3847b195739820099/expat-native/UNIHASH/build/recipe"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/relationship/a4d4f42d49b64dc2d3b1240b6870a981"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/relationship/b454134669d9d299cc84ae2b53f37149","from":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/source/4","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/license/3_28_0/BSD-3-Clause"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/relationship/b454134669d9d299cc84ae2b53f37149"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/relationship/f54e7f6247f24e6c94c95e271bd91ebb","from":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/license/3_28_0/BSD-3-Clause"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/relationship/f54e7f6247f24e6c94c95e271bd91ebb"}]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/source/1","software_downloadLocation":"git+https://github.com/openSUSE/libsolv.git@1e377699be108ec82bb798ec9c223d45d84a733c","software_packageUrl":"pkg:github/openSUSE/libsolv@1e377699be108ec82bb798ec9c223d45d84a733c@1e377699be108ec82bb798ec9c223d45d84a733c","software_packageVersion":"1e377699be108ec82bb798ec9c223d45d84a733c","software_primaryPurpose":"source","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/source/1"}],"externalRef":[{"type":"ExternalRef","externalRefType":"vcs","locator":["https://github.com/openSUSE/libsolv.git"]}],"name":"github.com.openSUSE.libsolv.git"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/source/2","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/source/2"}],"name":"0001-compress_buf-fix-musl-segfaults.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"49916354a89093036b7f46c4ffb03cfae020bfe8782b59771a9c53bfa8fe2ee4"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/source/3","software_primaryPurpose":"source","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/source/3"}],"name":"run-ptest","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"ceb40e306f75af13c55239ea44f35e6e321a986c72ab71260156008d801ffaec"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/libsolv-native-ebb6602e-80f3-5010-9df2-52ff211b3c18/3cef5af17d6c576b5a65864136f5e36feea88c21c0d586f8ea20cd7bbb205c69/source/4","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/1e4707710976cbb5155a4bae87b6d8e21d7f9304167e15c61bd0e33063524765/libsolv-native/UNIHASH/source/4"}],"name":"CVE-2026-9150.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"74430711f78dd6bf1b8453b6a81e5b236e0b32093a5bbaa0ebbbd8e91abc606a"}]}]}