{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2024-06-13T09:02:55Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdoc/recipe-tiff-1ae3fc22-c587-5500-8b1e-74b8c9348e28", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "0fd9fe22a8c0e268de6363c4d054426e70c100a8"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e5fdff7dae8e2afd80005a7a90f8dea34e1ac3e9"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "811b907fd3f5d983733680bc73a3d66894b17af6"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-arm", "spdxDocument": "http://spdx.org/spdxdoc/recipe-gcc-cross-arm-3ec6f16b-d802-5329-8e83-237a286c87f1"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e5a42d326c9cc3357c14e7d87ee66cf256db556b"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdoc/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "4edbba0a7de0b39fc4e120e6a1eab2f27901456e"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdoc/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f7bd53da33977f20b244704779f915a34551a05a"}, "externalDocumentId": "DocumentRef-dependency-recipe-libjpeg-turbo", "spdxDocument": "http://spdx.org/spdxdoc/recipe-libjpeg-turbo-79ed503e-688d-5819-a9d2-8bd90705a537"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "2cc9f6e7df788042f93cc2a32e680a386d021e23"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-cross", "spdxDocument": "http://spdx.org/spdxdoc/recipe-libtool-cross-07500b21-b619-56d3-838e-16ca401a612f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "be94b2cbae599cfb51d94eb448a6abf5391c774a"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d9d43d116a2bd9a16499140c4d884a698f4eaec4"}, "externalDocumentId": "DocumentRef-dependency-recipe-xz", "spdxDocument": "http://spdx.org/spdxdoc/recipe-xz-0b1dbf00-7439-5d43-bb26-1a70f5d63a71"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "18946e7a1726f37dc25bc6ef4ca5e53a204f50fa"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdoc/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-tiff", "packages": [{"SPDXID": "SPDXRef-Recipe-tiff", "copyrightText": "NOASSERTION", "description": "Library provides support for the Tag Image File Format (TIFF), a widely used format for storing image data.  This library provide means to easily access and create TIFF image files.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:libtiff:4.6.0:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.libtiff.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "licenseInfoFromFiles": ["NOASSERTION"], "name": "tiff", "sourceInfo": "CVEs fixed: CVE-2023-6277 CVE-2023-6228 CVE-2015-7313 CVE-2023-52355 CVE-2023-52356", "summary": "Provides support for the Tag Image File Format (TIFF)", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "4.6.0"}, {"SPDXID": "SPDXRef-Download-tiff-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "88b3979e6d5c7e32b50d7ec72fb15af724f6ab2cbf7e10880c360a77e4b5d99a"}], "copyrightText": "NOASSERTION", "downloadLocation": "http://download.osgeo.org/libtiff/tiff-4.6.0.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "tiff-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-tiff", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-tiff-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-tiff-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-arm:SPDXRef-Recipe-gcc-cross-arm"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libjpeg-turbo:SPDXRef-Recipe-libjpeg-turbo"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-cross:SPDXRef-Recipe-libtool-cross"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-xz:SPDXRef-Recipe-xz"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}