{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2026-06-06T17:33:00Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-python3-native-34cc7325-70e1-5a3a-873a-66b0c1f8d193", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "9249494b769b1ae4a7b7299449567739fdb7c07c"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-archive-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-archive-native-fd00b327-70b9-5c20-8c90-9c0103cbc9f0"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7f7ab1c8d80eb32bb8b6271b37467c02f3f753a0"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "76edce81aa1f261e54616ebf6e4f3a0b552faf8f"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "30e9c28b7507ae3561721046a4100da75e3a1835"}, "externalDocumentId": "DocumentRef-dependency-recipe-bzip2-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-bzip2-native-9d1fa3cb-3643-5f5e-9360-58c1eb05c68e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "efceca31d08fdf12e55d7bf344d7046ab61b7b7f"}, "externalDocumentId": "DocumentRef-dependency-recipe-expat-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-expat-native-77c42bb5-262f-5325-a2b1-1b01bd0d010a"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "271c66ab14de217f9066874960d323ba5e9f51b2"}, "externalDocumentId": "DocumentRef-dependency-recipe-gdbm-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gdbm-native-41413a0a-1570-5d00-a5f5-8d068dbf5997"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b4a970b16f0085a6a29924220aee14dc4c5308b0"}, "externalDocumentId": "DocumentRef-dependency-recipe-libedit-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libedit-native-6f691384-6781-5ebb-82b1-bb916697c420"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "80211be2780a4e0384eb91c0e0f7dc111c87eae6"}, "externalDocumentId": "DocumentRef-dependency-recipe-libffi-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libffi-native-16d6a62d-8719-56f3-a4ce-660f29fe886a"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "baea475c22f92a12b6b8c383abac97b9cfbd6785"}, "externalDocumentId": "DocumentRef-dependency-recipe-libnsl2-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libnsl2-native-25b9f36e-c12d-5dcf-bf25-5892da981acb"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5d3ba1869ca5476390e3bcd94eb175a648810c42"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtirpc-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtirpc-native-95d82d43-3a82-5fc4-812e-a93eeb169deb"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c253830dc09ec6ccbc6ee2eec11ef61d6e8cf57a"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5477ea6f678b04f09ad0c8dbe7cdf5e8ad472b32"}, "externalDocumentId": "DocumentRef-dependency-recipe-ncurses-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-ncurses-native-6ee9d8f0-8e87-5b73-a420-c66a1123b8a6"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7a501970699c2f4dd3b44248c126b8de953509d5"}, "externalDocumentId": "DocumentRef-dependency-recipe-openssl-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-openssl-native-29712d98-dace-570a-bc97-e67cefc5997d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7aaae7b957ba562333380a19d1021542d75cbbe5"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f56549a174f804e4e1847635aa30408a353d16fb"}, "externalDocumentId": "DocumentRef-dependency-recipe-sqlite3-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-sqlite3-native-37e6312b-56b6-52d3-af92-d788e79f1637"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "62e73da94eac905caa5e033b9fd1ec1716219938"}, "externalDocumentId": "DocumentRef-dependency-recipe-util-linux-libuuid-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-util-linux-libuuid-native-103ab003-39fa-5581-bc0b-bcf14aad3f6c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c3fc194bb5e44c8300ef775888ab5fc31b72c80b"}, "externalDocumentId": "DocumentRef-dependency-recipe-xz-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-xz-native-fb9b6d7a-1472-5337-888f-d4bf9e719144"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e7a5b3cb13083e3992c90c708d41e0df053032c9"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-native-1fc15e1f-ff2b-539e-861e-33e08efd56d2"}], "name": "recipe-python3-native", "packages": [{"SPDXID": "SPDXRef-Recipe-python3-native", "annotations": [{"annotationDate": "2026-06-06T17:33:00Z", "annotationType": "OTHER", "annotator": "Tool: oe-spdx-creator - 1.0", "comment": "isNative"}], "copyrightText": "NOASSERTION", "description": "Python is a programming language that lets you work more quickly and integrate your systems more effectively.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:python:python:3.12.12:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}, {"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:python_software_foundation:python:3.12.12:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}, {"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:cpython:3.12.12:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.python.org", "licenseConcluded": "NOASSERTION", "licenseDeclared": "PSF-2.0", "licenseInfoFromFiles": ["NOASSERTION"], "name": "python3-native", "sourceInfo": "CVEs fixed: CVE-2025-13836 CVE-2025-13837 CVE-2025-12084 CVE-2025-6075", "summary": "The Python Programming Language", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "3.12.12"}, {"SPDXID": "SPDXRef-Download-python3-native-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "fb85a13414b028c49ba18bbd523c2d055a30b56b18b92ce454ea2c51edc656c4"}], "copyrightText": "NOASSERTION", "downloadLocation": "http://www.python.org/ftp/python/3.12.12/Python-3.12.12.tar.xz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "python3-native-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-python3-native-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-python3-native-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-archive-native:SPDXRef-Recipe-autoconf-archive-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-bzip2-native:SPDXRef-Recipe-bzip2-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-expat-native:SPDXRef-Recipe-expat-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gdbm-native:SPDXRef-Recipe-gdbm-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libedit-native:SPDXRef-Recipe-libedit-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libffi-native:SPDXRef-Recipe-libffi-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libnsl2-native:SPDXRef-Recipe-libnsl2-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtirpc-native:SPDXRef-Recipe-libtirpc-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-ncurses-native:SPDXRef-Recipe-ncurses-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-openssl-native:SPDXRef-Recipe-openssl-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-sqlite3-native:SPDXRef-Recipe-sqlite3-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-util-linux-libuuid-native:SPDXRef-Recipe-util-linux-libuuid-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-xz-native:SPDXRef-Recipe-xz-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-python3-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib-native:SPDXRef-Recipe-zlib-native"}], "spdxVersion": "SPDX-2.2"}