{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-12-07T06:17:59Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-openssh-dd4ff61a-484b-5123-87bb-3e01690699c1", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "357eee412788fce244247e355fd809efd3eb2f1c"}, "externalDocumentId": "DocumentRef-dependency-recipe-audit", "spdxDocument": "http://spdx.org/spdxdocs/recipe-audit-7b440468-12de-52f3-9c0a-01e5f80a14e3"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5de4f25a6a0f70412a181656f1dc853f5bd65b1f"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "15bf57eda46fc9efcf8eefb1cceda4d54c1582be"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "9f423400aa5af26b92e04170038263e63a522364"}, "externalDocumentId": "DocumentRef-dependency-recipe-base-files", "spdxDocument": "http://spdx.org/spdxdocs/recipe-base-files-c146050a-959a-5836-966f-98e79d6e765f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "9ad69fca59deadc02ebf9d3c086393af02b462f0"}, "externalDocumentId": "DocumentRef-dependency-recipe-base-passwd", "spdxDocument": "http://spdx.org/spdxdocs/recipe-base-passwd-bb3f3152-7b84-5ef0-95bd-04186ff304e1"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "ed3c1736e2f739f960b20019b8848b2c0c472860"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-x86_64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-x86_64-a54677b2-404d-5f88-948b-b1314035058d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "3b0176af14dbc4107d7e1146cadb8c39a9528cc4"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "613b6a0af84bb9c21eadfb6bbe7cb8992f58ce64"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "823010c7fabdc0aeb786cf1fb53c77ef52821e33"}, "externalDocumentId": "DocumentRef-dependency-recipe-libpam", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libpam-598348bb-de94-5567-9012-dd2dbcb34f59"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "51abeeb02f92a541bf35bfe587620ad26cc5197f"}, "externalDocumentId": "DocumentRef-dependency-recipe-libselinux", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libselinux-d8557980-1d4b-58dd-8d30-944502bba2cb"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "64638fc88e44610b338c78e18f1940d37881499b"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-cross", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-cross-07500b21-b619-56d3-838e-16ca401a612f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1760f767b7c223a4626d0a093e35826d46c4ef11"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e9a9f44fdcdfdcf2c33e39551c58fe7ece43edd8"}, "externalDocumentId": "DocumentRef-dependency-recipe-libxcrypt", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libxcrypt-efbb6a8f-45ef-56f5-b465-7bb29439adf1"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "89c3ab9b285a29b970d7a8765a2f67aaf7875135"}, "externalDocumentId": "DocumentRef-dependency-recipe-openssl", "spdxDocument": "http://spdx.org/spdxdocs/recipe-openssl-48156327-17ba-5e34-b313-de0c1f21058e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "2a4c2e3d36be41a59977ab47dcfe93fc1e505087"}, "externalDocumentId": "DocumentRef-dependency-recipe-opkg-utils", "spdxDocument": "http://spdx.org/spdxdocs/recipe-opkg-utils-f3c24e09-f6ff-5f5c-ab93-a37218f4e1a7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "bbb36896d034ea729bf4847ec23565f105d9e4b4"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1b9fa2258ce2065f1d31342c9403caa27aa195ab"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-6845d95c-0853-56dd-b976-caae5a99461e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "556ccca88bb1df5c291c7b2630b571eceea56318"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-native-8f9e05bf-71e7-5a75-a2e0-b8f7479cc53d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7b668fb92e901fdae676e5ba23586ebb8ccf48e8"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow-sysroot", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-sysroot-b6b6920a-50f2-5a27-a753-5106a834f19f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "6e979cf3542ad5cb2a1caf8041d25249b31cc8f8"}, "externalDocumentId": "DocumentRef-dependency-recipe-systemd-systemctl-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-systemd-systemctl-native-2f3d50ae-528c-5654-b3e7-3b2e2de42e45"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8fd8756668adbab9590f75886317e05e7b4493a5"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-openssh", "packages": [{"SPDXID": "SPDXRef-Recipe-openssh", "copyrightText": "NOASSERTION", "description": "Secure rlogin/rsh/rcp/telnet replacement (OpenSSH) Ssh (Secure Shell) is a program for logging into a remote machine and for executing commands on a remote machine.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:openssh:9.6p1:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.openssh.com/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT", "licenseInfoFromFiles": ["NOASSERTION"], "name": "openssh", "sourceInfo": "CVEs fixed: CVE-2025-61985 CVE-2025-32728 CVE-2025-61984 CVE-2024-6387 CVE-2024-39894 CVE-2025-26466 CVE-2025-26465", "summary": "A suite of security-related network utilities based on the SSH protocol including the ssh client and sshd server", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "9.6p1"}, {"SPDXID": "SPDXRef-Download-openssh-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "910211c07255a8c5ad654391b40ee59800710dd8119dd5362de09385aa7a777c"}], "copyrightText": "NOASSERTION", "downloadLocation": "http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.6p1.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "openssh-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-openssh-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-openssh-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-audit:SPDXRef-Recipe-audit"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-base-files:SPDXRef-Recipe-base-files"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-base-passwd:SPDXRef-Recipe-base-passwd"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-x86_64:SPDXRef-Recipe-gcc-cross-x86_64"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libpam:SPDXRef-Recipe-libpam"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libselinux:SPDXRef-Recipe-libselinux"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-cross:SPDXRef-Recipe-libtool-cross"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libxcrypt:SPDXRef-Recipe-libxcrypt"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-openssl:SPDXRef-Recipe-openssl"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-opkg-utils:SPDXRef-Recipe-opkg-utils"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow:SPDXRef-Recipe-shadow"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow-native:SPDXRef-Recipe-shadow-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow-sysroot:SPDXRef-Recipe-shadow-sysroot"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-systemd-systemctl-native:SPDXRef-Recipe-systemd-systemctl-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}