{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-01-18T04:17:23Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-openssh-dd4ff61a-484b-5123-87bb-3e01690699c1", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "a14d124f3e5a0f92ce1db2edc61f4f99344687d5"}, "externalDocumentId": "DocumentRef-dependency-recipe-audit", "spdxDocument": "http://spdx.org/spdxdocs/recipe-audit-7b440468-12de-52f3-9c0a-01e5f80a14e3"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "591264d14af66957ad1e4fbbbf05ba72a52cf2b9"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5b3fb9a0055a51d353dffbd6903e2123a7fa3939"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a1aa67e4b1bef88a9cef91ae7b2fe9708b882931"}, "externalDocumentId": "DocumentRef-dependency-recipe-base-files", "spdxDocument": "http://spdx.org/spdxdocs/recipe-base-files-c146050a-959a-5836-966f-98e79d6e765f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "bc219495654a411b7dc375a98144027f33c41395"}, "externalDocumentId": "DocumentRef-dependency-recipe-base-passwd", "spdxDocument": "http://spdx.org/spdxdocs/recipe-base-passwd-bb3f3152-7b84-5ef0-95bd-04186ff304e1"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "75e1e45042e6d0c014d5ae390e29d69e2442b0ed"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "3148c6c18cc6d8d6c1f5159113d7c59e7598365c"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1737dda5f7fe9b5fe6869911056ee7405301b9a0"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8f360a6aef8dfcac057b62f55900fe3379091f48"}, "externalDocumentId": "DocumentRef-dependency-recipe-libpam", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libpam-598348bb-de94-5567-9012-dd2dbcb34f59"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "561a30934b026dfe918e5b7a8d0982ee96bf2573"}, "externalDocumentId": "DocumentRef-dependency-recipe-libselinux", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libselinux-d8557980-1d4b-58dd-8d30-944502bba2cb"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0fefb54c10c05dc581277e064ec954bd1760ffab"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-cross", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-cross-07500b21-b619-56d3-838e-16ca401a612f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "eda2871d050f165356d6ea3f12d2d2797526004b"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "685af2bda6e97d7c4721b9dd0e0ea890712a3396"}, "externalDocumentId": "DocumentRef-dependency-recipe-libxcrypt", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libxcrypt-efbb6a8f-45ef-56f5-b465-7bb29439adf1"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b9a9b307edf896c1c6a00126f161c89925c89769"}, "externalDocumentId": "DocumentRef-dependency-recipe-openssl", "spdxDocument": "http://spdx.org/spdxdocs/recipe-openssl-48156327-17ba-5e34-b313-de0c1f21058e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7e040df878d2d90ac3f1c7ba075f1d04aedf6b95"}, "externalDocumentId": "DocumentRef-dependency-recipe-opkg-utils", "spdxDocument": "http://spdx.org/spdxdocs/recipe-opkg-utils-f3c24e09-f6ff-5f5c-ab93-a37218f4e1a7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "2a7d8015c64ca98b4ea3c93cc4a714fa4944d93c"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a2621e39b14f11d25797c65a5ce4959dbbe16665"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-6845d95c-0853-56dd-b976-caae5a99461e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8f46f3bdb0badb9b233a41d84a26e034382603cf"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-native-8f9e05bf-71e7-5a75-a2e0-b8f7479cc53d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c1e2102622032d670073b6d8fc544e543ce707d9"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow-sysroot", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-sysroot-b6b6920a-50f2-5a27-a753-5106a834f19f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "007ecf222f52ecb957217049890ee6e27db6087f"}, "externalDocumentId": "DocumentRef-dependency-recipe-systemd-systemctl-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-systemd-systemctl-native-2f3d50ae-528c-5654-b3e7-3b2e2de42e45"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "32606bc9aa2ea7517ebd329a7ed917493f6f5a0b"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-openssh", "packages": [{"SPDXID": "SPDXRef-Recipe-openssh", "copyrightText": "NOASSERTION", "description": "Secure rlogin/rsh/rcp/telnet replacement (OpenSSH) Ssh (Secure Shell) is a program for logging into a remote machine and for executing commands on a remote machine.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:openssh:9.6p1:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.openssh.com/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT", "licenseInfoFromFiles": ["NOASSERTION"], "name": "openssh", "sourceInfo": "CVEs fixed: CVE-2024-39894 CVE-2024-6387", "summary": "A suite of security-related network utilities based on the SSH protocol including the ssh client and sshd server", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "9.6p1"}, {"SPDXID": "SPDXRef-Download-openssh-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "910211c07255a8c5ad654391b40ee59800710dd8119dd5362de09385aa7a777c"}], "copyrightText": "NOASSERTION", "downloadLocation": "http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.6p1.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "openssh-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-openssh-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-openssh-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-audit:SPDXRef-Recipe-audit"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-base-files:SPDXRef-Recipe-base-files"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-base-passwd:SPDXRef-Recipe-base-passwd"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libpam:SPDXRef-Recipe-libpam"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libselinux:SPDXRef-Recipe-libselinux"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-cross:SPDXRef-Recipe-libtool-cross"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libxcrypt:SPDXRef-Recipe-libxcrypt"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-openssl:SPDXRef-Recipe-openssl"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-opkg-utils:SPDXRef-Recipe-opkg-utils"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow:SPDXRef-Recipe-shadow"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow-native:SPDXRef-Recipe-shadow-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow-sysroot:SPDXRef-Recipe-shadow-sysroot"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-systemd-systemctl-native:SPDXRef-Recipe-systemd-systemctl-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}