{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-12-07T03:52:42Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-qemu-system-native-9ec41bd8-2a81-5fd3-bbdd-1390e2d619e7", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "b4227be4b159c4dfa5f264882868552175749418"}, "externalDocumentId": "DocumentRef-dependency-recipe-alsa-lib-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-alsa-lib-native-fc25316a-32ec-523a-965f-045421312b9c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e2d47387033e302bb667306ad487b1d0041ebdf9"}, "externalDocumentId": "DocumentRef-dependency-recipe-bison-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-bison-native-d18e081d-4246-5067-9e41-c5ae29c9b9ff"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c920130e6e195ffce41f350c90d5c98953ed6f9f"}, "externalDocumentId": "DocumentRef-dependency-recipe-dtc-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-dtc-native-84f78955-0c62-5b75-8fb7-541c6450e247"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "cc1b3ac8ab1be9613596b8125bcb0bf77657c8eb"}, "externalDocumentId": "DocumentRef-dependency-recipe-glib-2.0-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glib-2.0-native-705aca78-6a39-5d5c-9e39-a6c873295cf1"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "53d2daf87c9ff9689c243acdffcdec0f0c6d85c4"}, "externalDocumentId": "DocumentRef-dependency-recipe-libepoxy-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libepoxy-native-402cf58f-3238-5ebe-802f-c84aa28a58da"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5a38408524dffb73bf6fb2410e43f93b9c4edfdc"}, "externalDocumentId": "DocumentRef-dependency-recipe-libpng-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libpng-native-8730f95e-d7ef-57ee-86ea-bb558018e325"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d7e8a82734449aaeb9bf8e83992956dfec8f02c7"}, "externalDocumentId": "DocumentRef-dependency-recipe-libsdl2-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libsdl2-native-9c698e5f-f89d-5826-a358-21c6d94e415f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "ffa63a806434a692b9b0fe98cd2f4f8008d7723e"}, "externalDocumentId": "DocumentRef-dependency-recipe-libslirp-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libslirp-native-3b625703-158e-5afd-8bd2-50c02cc611c0"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7d0d2fa73d98f8774c0a083019f8b5fb3e785358"}, "externalDocumentId": "DocumentRef-dependency-recipe-meson-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-meson-native-c406ca80-e1f3-5f06-98d6-b7b62049c315"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "65f90dbc8114e9325bbd8b74d49926a582d33d6b"}, "externalDocumentId": "DocumentRef-dependency-recipe-ninja-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-ninja-native-69509a4d-51be-58e4-8b69-f8cab885e13f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "20bfb6a40afc8fdf387b8a2df8d613cfa8227696"}, "externalDocumentId": "DocumentRef-dependency-recipe-pixman-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pixman-native-59668663-9f94-5901-ae7f-47e8b4b68180"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "bbb36896d034ea729bf4847ec23565f105d9e4b4"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "bacd43a730f09c3e4a211dab2f2b9158cb50629f"}, "externalDocumentId": "DocumentRef-dependency-recipe-python3-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-python3-native-34cc7325-70e1-5a3a-873a-66b0c1f8d193"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f1364073762b098ebfeca63e764a6e8fd5872756"}, "externalDocumentId": "DocumentRef-dependency-recipe-qemu-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-qemu-native-4a6c275b-748a-5a53-90e0-46381c95e2ff"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "357032c55be6511a888d003ad75cd9c35c999363"}, "externalDocumentId": "DocumentRef-dependency-recipe-virglrenderer-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-virglrenderer-native-d709b443-4575-56d6-818d-ef6028c2e778"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f28a0da22d2c8ea543dd9c4b897ffcdc0af4dbc6"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-native-1fc15e1f-ff2b-539e-861e-33e08efd56d2"}], "name": "recipe-qemu-system-native", "packages": [{"SPDXID": "SPDXRef-Recipe-qemu-system-native", "annotations": [{"annotationDate": "2025-12-07T03:52:42Z", "annotationType": "OTHER", "annotator": "Tool: oe-spdx-creator - 1.0", "comment": "isNative"}], "copyrightText": "NOASSERTION", "description": "QEMU is a hosted virtual machine monitor: it emulates the machine's processor through dynamic binary translation and provides a set of different hardware and device models for the machine, enabling it to run a variety of guest operating systems", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:qemu:8.2.7:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://qemu.org", "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only AND LGPL-2.1-only", "licenseInfoFromFiles": ["NOASSERTION"], "name": "qemu-system-native", "sourceInfo": "CVEs fixed: CVE-2024-8354 CVE-2022-1050 CVE-2024-7730 CVE-2024-6505", "summary": "Fast open source processor emulator", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "8.2.7"}, {"SPDXID": "SPDXRef-Download-qemu-system-native-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "1f0604f296ab9acb4854c054764a1ba408643fc299bd54a6500cccfaaca65b55"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://download.qemu.org/qemu-8.2.7.tar.xz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "qemu-system-native-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-qemu-system-native-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-qemu-system-native-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-alsa-lib-native:SPDXRef-Recipe-alsa-lib-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-bison-native:SPDXRef-Recipe-bison-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-dtc-native:SPDXRef-Recipe-dtc-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glib-2.0-native:SPDXRef-Recipe-glib-2.0-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libepoxy-native:SPDXRef-Recipe-libepoxy-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libpng-native:SPDXRef-Recipe-libpng-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libsdl2-native:SPDXRef-Recipe-libsdl2-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libslirp-native:SPDXRef-Recipe-libslirp-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-meson-native:SPDXRef-Recipe-meson-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-ninja-native:SPDXRef-Recipe-ninja-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pixman-native:SPDXRef-Recipe-pixman-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-python3-native:SPDXRef-Recipe-python3-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-qemu-native:SPDXRef-Recipe-qemu-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-virglrenderer-native:SPDXRef-Recipe-virglrenderer-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-qemu-system-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib-native:SPDXRef-Recipe-zlib-native"}], "spdxVersion": "SPDX-2.2"}