{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2024-12-10T03:10:36Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-libarchive-native-43980718-348e-546b-935b-fc9e87538c23", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "d4bf7c0dc41432266fe79262e6f4db97de40e987"}, "externalDocumentId": "DocumentRef-dependency-recipe-acl-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-acl-native-90ada574-0418-501d-ab9a-814f7f8cf160"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "fa158b14883e55171a55fc40f1c260e95c961d04"}, "externalDocumentId": "DocumentRef-dependency-recipe-attr-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-attr-native-a4ca441b-3630-5ca7-a9d6-f08d4bc6cd5b"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "00cf21d37a326e22922436580d2e3743484aa0b1"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "393eb701a24be35c985e7c29761f5fa102d83bbd"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f5f23c3f2f6bae403156368a7d9b45f06a8c28a0"}, "externalDocumentId": "DocumentRef-dependency-recipe-bzip2-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-bzip2-native-9d1fa3cb-3643-5f5e-9360-58c1eb05c68e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "eb254e8dddaff5f50d7376c9bdf1784d852fccde"}, "externalDocumentId": "DocumentRef-dependency-recipe-e2fsprogs-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-e2fsprogs-native-75777574-9a0a-53b1-836b-9df344bcc3ee"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "6c72f4e276c26d2ff1fa23c188869b18c360f497"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a6f8f11db963fc22327d19fd94675a3abc3460ab"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5d29745dc41a321422a9a667cbe8a0459102b60f"}, "externalDocumentId": "DocumentRef-dependency-recipe-xz-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-xz-native-fb9b6d7a-1472-5337-888f-d4bf9e719144"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7a242a1076af2910752c21aa01295957f4aad154"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-native-1fc15e1f-ff2b-539e-861e-33e08efd56d2"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "84d8fc0ea962e886f9c69d964f25a182ecad1eac"}, "externalDocumentId": "DocumentRef-dependency-recipe-zstd-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zstd-native-ccc925e5-9b0f-5106-b595-cbfe0152bf06"}], "name": "recipe-libarchive-native", "packages": [{"SPDXID": "SPDXRef-Recipe-libarchive-native", "annotations": [{"annotationDate": "2024-12-10T03:10:36Z", "annotationType": "OTHER", "annotator": "Tool: oe-spdx-creator - 1.0", "comment": "isNative"}], "copyrightText": "NOASSERTION", "description": "C library and command-line tools for reading and writing tar, cpio, zip, ISO, and other archive formats", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:libarchive:3.7.4:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.libarchive.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "licenseInfoFromFiles": ["NOASSERTION"], "name": "libarchive-native", "sourceInfo": "CVEs fixed: CVE-2024-48957 CVE-2024-48958", "summary": "Support for reading various archive formats", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "3.7.4"}, {"SPDXID": "SPDXRef-Download-libarchive-native-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "7875d49596286055b52439ed42f044bd8ad426aa4cc5aabd96bfe7abb971d5e8"}], "copyrightText": "NOASSERTION", "downloadLocation": "http://libarchive.org/downloads/libarchive-3.7.4.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "libarchive-native-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-libarchive-native-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-libarchive-native-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-acl-native:SPDXRef-Recipe-acl-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-attr-native:SPDXRef-Recipe-attr-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-bzip2-native:SPDXRef-Recipe-bzip2-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-e2fsprogs-native:SPDXRef-Recipe-e2fsprogs-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-xz-native:SPDXRef-Recipe-xz-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib-native:SPDXRef-Recipe-zlib-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zstd-native:SPDXRef-Recipe-zstd-native"}], "spdxVersion": "SPDX-2.2"}