{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-11-15T17:34:48Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-gnutls-native-0be40366-130d-5a32-aafe-676345725e9e", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "851db8ae3603eccb96bf8baeb78ce49c5a0a0d8c"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7b9289b6750d9573557268bc42cdf59591f9f2f0"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d8983f179700d76f81df7b2ef011d10cd51dc4c1"}, "externalDocumentId": "DocumentRef-dependency-recipe-gettext-minimal-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gettext-minimal-native-d0a27f93-c2cb-5d69-ab6b-b5b2d7da1769"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b42aadba77a55fb1e0e8bff31b4486a27de0124c"}, "externalDocumentId": "DocumentRef-dependency-recipe-gmp-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gmp-native-008a73c2-0509-5b24-a32c-a84f417c6f76"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d1a620b14c2c0a3cfb36a37d154ec1b8987f0ac0"}, "externalDocumentId": "DocumentRef-dependency-recipe-gtk-doc-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gtk-doc-native-5263677d-0962-5f28-a0fb-1308d67c5da7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "dc154e2b1b5290fa5abfd704a8535ade0ab219c6"}, "externalDocumentId": "DocumentRef-dependency-recipe-libidn2-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libidn2-native-04788e3c-4a0c-5a85-bfa7-e7abae94d85f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d5a7af7bb26a8fb38bff01ce27fc629224424eed"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtasn1-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtasn1-native-8c740967-8f95-571e-9be6-d0bd3c4186c8"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "4a347442b16b8b457d33d26fd617696cecde4cc7"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8e0940370a0c3987b67ce20765b76f2668a58af3"}, "externalDocumentId": "DocumentRef-dependency-recipe-libunistring-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libunistring-native-5d624273-d6d1-5bce-8df3-644ee7f4707a"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "967aa32742519b7c5e203cfea0f67c18c8ef91ed"}, "externalDocumentId": "DocumentRef-dependency-recipe-nettle-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-nettle-native-31370ab6-9dbe-5100-8bc0-76801c8c3a0e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "6795093d5dd07bf3ffc919455d15340b5abf1f46"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e07735f62b5681b0ccb5905e76a2af6fc90fdbf5"}, "externalDocumentId": "DocumentRef-dependency-recipe-python3-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-python3-native-34cc7325-70e1-5a3a-873a-66b0c1f8d193"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "61a5b84651f4b21eb7054036c7c7e926185e74c3"}, "externalDocumentId": "DocumentRef-dependency-recipe-texinfo-dummy-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-texinfo-dummy-native-cb9012ff-d8d8-5775-98c1-f58ed5fb9573"}], "name": "recipe-gnutls-native", "packages": [{"SPDXID": "SPDXRef-Recipe-gnutls-native", "annotations": [{"annotationDate": "2025-11-15T17:34:48Z", "annotationType": "OTHER", "annotator": "Tool: oe-spdx-creator - 1.0", "comment": "isNative"}], "copyrightText": "NOASSERTION", "description": "a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:gnutls:3.8.4:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "https://gnutls.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnutls-native", "sourceInfo": "CVEs fixed: CVE-2025-32989 CVE-2025-32990 CVE-2025-6395 CVE-2025-32988 CVE-2024-12243", "summary": "GNU Transport Layer Security Library", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "3.8.4"}, {"SPDXID": "SPDXRef-Download-gnutls-native-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "2bea4e154794f3f00180fa2a5c51fe8b005ac7a31cd58bd44cdfa7f36ebc3a9b"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.4.tar.xz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnutls-native-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-gnutls-native-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-gnutls-native-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gettext-minimal-native:SPDXRef-Recipe-gettext-minimal-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gmp-native:SPDXRef-Recipe-gmp-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gtk-doc-native:SPDXRef-Recipe-gtk-doc-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libidn2-native:SPDXRef-Recipe-libidn2-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtasn1-native:SPDXRef-Recipe-libtasn1-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libunistring-native:SPDXRef-Recipe-libunistring-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-nettle-native:SPDXRef-Recipe-nettle-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-python3-native:SPDXRef-Recipe-python3-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-texinfo-dummy-native:SPDXRef-Recipe-texinfo-dummy-native"}], "spdxVersion": "SPDX-2.2"}