{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-05-10T19:14:56Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-openssh-dd4ff61a-484b-5123-87bb-3e01690699c1", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "c11a7723199423f4526f1904125fcee0694c8527"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e1ad8c29a9424d9fe74e5e6a29b29fe707e332c0"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "2e8dec25a421dc0e2ccea2442e863f178d7c8d5f"}, "externalDocumentId": "DocumentRef-dependency-recipe-base-files", "spdxDocument": "http://spdx.org/spdxdocs/recipe-base-files-c146050a-959a-5836-966f-98e79d6e765f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "670fdd9f4f196205268762db1168dfe12c5039b0"}, "externalDocumentId": "DocumentRef-dependency-recipe-base-passwd", "spdxDocument": "http://spdx.org/spdxdocs/recipe-base-passwd-bb3f3152-7b84-5ef0-95bd-04186ff304e1"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "626bd259648bd837a736da341f3e4562112de984"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "dc06fabe25133177baf23846c11527771077ada9"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "78f2f3e0e17baedef9f1b25094e73e91f0595805"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "fdc31d43f2ef3b2e8a68b4f87047eae5dfbdab87"}, "externalDocumentId": "DocumentRef-dependency-recipe-libpam", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libpam-598348bb-de94-5567-9012-dd2dbcb34f59"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c7db4ecb2043cc6a32f776fcd52530969213beb6"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-cross", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-cross-07500b21-b619-56d3-838e-16ca401a612f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "bfb4ff27fee24dfe2a90cef2f21c915c49e63fab"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "aa372e1b70c5cf51bba0efaac96ab37c59453f53"}, "externalDocumentId": "DocumentRef-dependency-recipe-libxcrypt", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libxcrypt-efbb6a8f-45ef-56f5-b465-7bb29439adf1"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "6b6461825515c149d6dc480975a2c33a2871d617"}, "externalDocumentId": "DocumentRef-dependency-recipe-openssl", "spdxDocument": "http://spdx.org/spdxdocs/recipe-openssl-48156327-17ba-5e34-b313-de0c1f21058e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1896e19c56b35c5ba65d51f103a85283900b130c"}, "externalDocumentId": "DocumentRef-dependency-recipe-opkg-utils", "spdxDocument": "http://spdx.org/spdxdocs/recipe-opkg-utils-f3c24e09-f6ff-5f5c-ab93-a37218f4e1a7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c7798615bd290a752127c58c3b2b2533605fa47f"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "357b24faa2d7f97a9d61084ca3f58bfa3f8785ef"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-6845d95c-0853-56dd-b976-caae5a99461e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7527863186e4fda062de0ae41f1176230a828950"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-native-8f9e05bf-71e7-5a75-a2e0-b8f7479cc53d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0033ff075fa58e43c316c3544f995f1493474413"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow-sysroot", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-sysroot-b6b6920a-50f2-5a27-a753-5106a834f19f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "bdc8da47d6518e378bf4b4b790978b2aeb696492"}, "externalDocumentId": "DocumentRef-dependency-recipe-systemd-systemctl-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-systemd-systemctl-native-2f3d50ae-528c-5654-b3e7-3b2e2de42e45"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "9852e1f0cee5ef68611b31cf064dece6999a7607"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-openssh", "packages": [{"SPDXID": "SPDXRef-Recipe-openssh", "copyrightText": "NOASSERTION", "description": "Secure rlogin/rsh/rcp/telnet replacement (OpenSSH) Ssh (Secure Shell) is a program for logging into a remote machine and for executing commands on a remote machine.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:openssh:9.6p1:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.openssh.com/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT", "licenseInfoFromFiles": ["NOASSERTION"], "name": "openssh", "sourceInfo": "CVEs fixed: CVE-2025-26466 CVE-2024-6387 CVE-2024-39894 CVE-2025-26465", "summary": "A suite of security-related network utilities based on the SSH protocol including the ssh client and sshd server", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "9.6p1"}, {"SPDXID": "SPDXRef-Download-openssh-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "910211c07255a8c5ad654391b40ee59800710dd8119dd5362de09385aa7a777c"}], "copyrightText": "NOASSERTION", "downloadLocation": "http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.6p1.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "openssh-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-openssh-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-openssh-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-base-files:SPDXRef-Recipe-base-files"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-base-passwd:SPDXRef-Recipe-base-passwd"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libpam:SPDXRef-Recipe-libpam"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-cross:SPDXRef-Recipe-libtool-cross"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libxcrypt:SPDXRef-Recipe-libxcrypt"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-openssl:SPDXRef-Recipe-openssl"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-opkg-utils:SPDXRef-Recipe-opkg-utils"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow:SPDXRef-Recipe-shadow"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow-native:SPDXRef-Recipe-shadow-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow-sysroot:SPDXRef-Recipe-shadow-sysroot"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-systemd-systemctl-native:SPDXRef-Recipe-systemd-systemctl-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}