{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-12-07T05:32:51Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-gnupg-491982f3-f960-5a2a-940c-b1d5fa8abd81", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "ef15beb3544d5b862badf573941da02572ad858a"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a5c07f1d16b5d858d23ab875d72ebd497b91c8f2"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "268a67bbcf3ff5b2213a1205b36eb52bbf0ac216"}, "externalDocumentId": "DocumentRef-dependency-recipe-bzip2", "spdxDocument": "http://spdx.org/spdxdocs/recipe-bzip2-48d77de4-d76a-580e-82f3-6bfefd5b9795"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "ec0a1b656c95c793c6db74286cbdb192799b431b"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "03f366603b514f06cf6c9da472e5ccf84b4cb49b"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "75c496ce95865c38a269762d2c96a762026aeacb"}, "externalDocumentId": "DocumentRef-dependency-recipe-gettext-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gettext-native-bc0b5e4e-69c4-5def-955c-45419d0a98ee"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "df73de343349e165d92f43ef314c7bb7fd0fab8f"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e9884716282a14f4ba205da3a569357c05c4e415"}, "externalDocumentId": "DocumentRef-dependency-recipe-gnutls", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gnutls-e34d366c-a9b2-5b9b-b4a9-0aabdc1cc230"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "88ecb03c976dc71a181d7e1e4de3a4ebd303cbdc"}, "externalDocumentId": "DocumentRef-dependency-recipe-libassuan", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libassuan-78030568-a2de-5118-b65e-c70ed786200c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "6873e1a1a90b0ba318319970759b2564189ed590"}, "externalDocumentId": "DocumentRef-dependency-recipe-libgcrypt", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libgcrypt-5bf23291-72b3-5400-b74e-9a6f33fdb451"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7da550e80192d566b218370e7ea17c73e6e0ec8b"}, "externalDocumentId": "DocumentRef-dependency-recipe-libksba", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libksba-b0c12d8f-d93e-523f-9010-bd9df46c9a78"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7be4c4a1b6cf3305d0a85df871af9da37254673f"}, "externalDocumentId": "DocumentRef-dependency-recipe-libselinux", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libselinux-d8557980-1d4b-58dd-8d30-944502bba2cb"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "549f4cc98e713c492117f533ca2c58f2fe9072f8"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-cross", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-cross-07500b21-b619-56d3-838e-16ca401a612f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "81c866e6fb3a1dbe2f0de101bbd8502675950493"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d0ef4d0b0f705ff8e883d73219c3efbb8e5eab66"}, "externalDocumentId": "DocumentRef-dependency-recipe-npth", "spdxDocument": "http://spdx.org/spdxdocs/recipe-npth-4af89506-76e0-523f-bfcf-ef0243054c0c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0435278567a160eaf9260bb76b5d4802ecafbd24"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "28179f387ccadd9ffef37fd731b6473c95906f28"}, "externalDocumentId": "DocumentRef-dependency-recipe-readline", "spdxDocument": "http://spdx.org/spdxdocs/recipe-readline-c3815bde-1cd5-5568-bcc2-54e657e67a2d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "49533ed9300b032ee0fdef8731386f290c543a20"}, "externalDocumentId": "DocumentRef-dependency-recipe-texinfo-dummy-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-texinfo-dummy-native-cb9012ff-d8d8-5775-98c1-f58ed5fb9573"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f0a104a759793a0b7d93fa6323019c2ee0c0726c"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-gnupg", "packages": [{"SPDXID": "SPDXRef-Recipe-gnupg", "copyrightText": "NOASSERTION", "description": "A complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG allows you to encrypt and sign your data and communications; it features a versatile key management system, along with access modules for all kinds of public key directories.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:gnupg:2.4.8:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.gnupg.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-only AND LGPL-3.0-only", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnupg", "sourceInfo": "CVEs fixed: CVE-2025-30258", "summary": "GNU Privacy Guard - encryption and signing tools (2.x)", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "2.4.8"}, {"SPDXID": "SPDXRef-Download-gnupg-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "b58c80d79b04d3243ff49c1c3fc6b5f83138eb3784689563bcdd060595318616"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://www.gnupg.org/ftp/gcrypt/gnupg/gnupg-2.4.8.tar.bz2", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnupg-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-gnupg-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-gnupg-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-bzip2:SPDXRef-Recipe-bzip2"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gettext-native:SPDXRef-Recipe-gettext-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gnutls:SPDXRef-Recipe-gnutls"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libassuan:SPDXRef-Recipe-libassuan"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libgcrypt:SPDXRef-Recipe-libgcrypt"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libksba:SPDXRef-Recipe-libksba"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libselinux:SPDXRef-Recipe-libselinux"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-cross:SPDXRef-Recipe-libtool-cross"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-npth:SPDXRef-Recipe-npth"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-readline:SPDXRef-Recipe-readline"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-texinfo-dummy-native:SPDXRef-Recipe-texinfo-dummy-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}