{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-10-08T05:11:03Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdoc/recipe-libarchive-native-43980718-348e-546b-935b-fc9e87538c23", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "c7e345602feec8b0f6197946211e7a8d02987099"}, "externalDocumentId": "DocumentRef-dependency-recipe-attr-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-attr-native-a4ca441b-3630-5ca7-a9d6-f08d4bc6cd5b"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "eed9c11683b31b8db485dcd0d748901faa8ee377"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-archive-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-autoconf-archive-native-fd00b327-70b9-5c20-8c90-9c0103cbc9f0"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5141829c94da592dc5b31ce9ad9fc4b2b38ce3bb"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "2ac960239026839949a4e12c171c7b81819d911f"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5c672430c79ccccbffa40230d0a49f3315bb8318"}, "externalDocumentId": "DocumentRef-dependency-recipe-bzip2-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-bzip2-native-9d1fa3cb-3643-5f5e-9360-58c1eb05c68e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "af459276c6ad6acd5d8b5fba8e93a3857731fc90"}, "externalDocumentId": "DocumentRef-dependency-recipe-e2fsprogs-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-e2fsprogs-native-75777574-9a0a-53b1-836b-9df344bcc3ee"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "30112c3f7326ecf0610900b2c24854e4db15e939"}, "externalDocumentId": "DocumentRef-dependency-recipe-gettext-minimal-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-gettext-minimal-native-d0a27f93-c2cb-5d69-ab6b-b5b2d7da1769"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "987971e59c1accd477ad4c4bc9038374bd5ed4f5"}, "externalDocumentId": "DocumentRef-dependency-recipe-gnu-config-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-gnu-config-native-7f998b5b-4a9f-5868-bb80-1279a9b986ff"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "3d88370c9ac5bd64438b80c1dd7d0d05c9df8d2c"}, "externalDocumentId": "DocumentRef-dependency-recipe-libcap-ng-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-libcap-ng-native-14985d36-c68b-5e36-b2e3-71dfd5168cd8"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "baeeb7ce15927b8d0db144ae44eb35d3375f7d00"}, "externalDocumentId": "DocumentRef-dependency-recipe-libpcre2-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-libpcre2-native-87c509bc-91cb-5a3c-9a43-68404322bbb2"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "01179801c006d09b638c85f3fcf6986a4f07b01a"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "632830c77ef06117716426901ec397d3a6f3a250"}, "externalDocumentId": "DocumentRef-dependency-recipe-lzo-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-lzo-native-cc822a69-9fb9-5953-addb-4e3c5400ddee"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0f1cb95ffa6ed549875a8ea7bd199c8b1194cd26"}, "externalDocumentId": "DocumentRef-dependency-recipe-m4-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-m4-native-5679b535-f65a-57b6-8760-ded5f4d5578c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0a899edd56222ece0ba7ba796dbe1961ce2e5ba4"}, "externalDocumentId": "DocumentRef-dependency-recipe-ncurses-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-ncurses-native-6ee9d8f0-8e87-5b73-a420-c66a1123b8a6"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f22327f7669888c2c676168d7f20b2fe01d164ed"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "023961e758c52ff2ab511b6bb5a6c64c7b14f554"}, "externalDocumentId": "DocumentRef-dependency-recipe-texinfo-dummy-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-texinfo-dummy-native-cb9012ff-d8d8-5775-98c1-f58ed5fb9573"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7c62030f13beb3b9ce60fd39d0f04919ded09d34"}, "externalDocumentId": "DocumentRef-dependency-recipe-util-linux-libuuid-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-util-linux-libuuid-native-103ab003-39fa-5581-bc0b-bcf14aad3f6c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "6a8c8a53c4200e5db710260e2bdf50d5192aef82"}, "externalDocumentId": "DocumentRef-dependency-recipe-util-linux-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-util-linux-native-ad149639-d77e-5762-95b9-57fc9f43ba41"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d9639db36cd5a6528e214785f582d8d1a69f1c3d"}, "externalDocumentId": "DocumentRef-dependency-recipe-xz-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-xz-native-fb9b6d7a-1472-5337-888f-d4bf9e719144"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c467e55a7993bbf254c8959c0c12e3fd270cf11f"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-zlib-native-1fc15e1f-ff2b-539e-861e-33e08efd56d2"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f2ce859a27dc32d8ee26e3f45ea79025f237ccc0"}, "externalDocumentId": "DocumentRef-dependency-recipe-zstd-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-zstd-native-ccc925e5-9b0f-5106-b595-cbfe0152bf06"}], "name": "recipe-libarchive-native", "packages": [{"SPDXID": "SPDXRef-Recipe-libarchive-native", "annotations": [{"annotationDate": "2025-10-08T05:11:03Z", "annotationType": "OTHER", "annotator": "Tool: oe-spdx-creator - 1.0", "comment": "isNative"}], "copyrightText": "NOASSERTION", "description": "C library and command-line tools for reading and writing tar, cpio, zip, ISO, and other archive formats", "downloadLocation": "http://libarchive.org/downloads/libarchive-3.6.2.tar.gz", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:*:libarchive:3.6.2:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.libarchive.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "licenseInfoFromFiles": ["NOASSERTION"], "name": "libarchive-native", "sourceInfo": "CVEs fixed: CVE-2025-5918 CVE-2024-26256 CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2024-48958 CVE-2024-20696 CVE-2025-25724 CVE-2024-48957", "summary": "Support for reading various archive formats", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "3.6.2"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-attr-native:SPDXRef-Recipe-attr-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-archive-native:SPDXRef-Recipe-autoconf-archive-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-bzip2-native:SPDXRef-Recipe-bzip2-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-e2fsprogs-native:SPDXRef-Recipe-e2fsprogs-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gettext-minimal-native:SPDXRef-Recipe-gettext-minimal-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gnu-config-native:SPDXRef-Recipe-gnu-config-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libcap-ng-native:SPDXRef-Recipe-libcap-ng-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libpcre2-native:SPDXRef-Recipe-libpcre2-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-lzo-native:SPDXRef-Recipe-lzo-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-m4-native:SPDXRef-Recipe-m4-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-ncurses-native:SPDXRef-Recipe-ncurses-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-texinfo-dummy-native:SPDXRef-Recipe-texinfo-dummy-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-util-linux-libuuid-native:SPDXRef-Recipe-util-linux-libuuid-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-util-linux-native:SPDXRef-Recipe-util-linux-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-xz-native:SPDXRef-Recipe-xz-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib-native:SPDXRef-Recipe-zlib-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zstd-native:SPDXRef-Recipe-zstd-native"}], "spdxVersion": "SPDX-2.2"}