{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2026-06-06T17:57:09Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-gnupg-491982f3-f960-5a2a-940c-b1d5fa8abd81", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "be97248b90548e96ef56791bfa2f41eaf36a3caa"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7da064e9d6a3bb755cb2573c9a3b6448303707db"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "3a543e915c42458350e43e179c3dcff63ca1b7ac"}, "externalDocumentId": "DocumentRef-dependency-recipe-bzip2", "spdxDocument": "http://spdx.org/spdxdocs/recipe-bzip2-48d77de4-d76a-580e-82f3-6bfefd5b9795"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "47cad0ae83d9d11a0dd7c3d6a717508c1feff3e3"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "fc52e6a5242edd87b72afd0d02b21b90cf55126f"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "451aa9739cf522aa3dfef0a623e238f51bfce484"}, "externalDocumentId": "DocumentRef-dependency-recipe-gettext-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gettext-native-bc0b5e4e-69c4-5def-955c-45419d0a98ee"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "36c1dfb7fa4f6a2f7152ef8d0b10f796354bc0f2"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "334cb67548f3b68482c62ee472791e244ee72d9c"}, "externalDocumentId": "DocumentRef-dependency-recipe-gnutls", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gnutls-e34d366c-a9b2-5b9b-b4a9-0aabdc1cc230"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c235747af72675c1dd0aac3abece2aa410d56fa8"}, "externalDocumentId": "DocumentRef-dependency-recipe-libassuan", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libassuan-78030568-a2de-5118-b65e-c70ed786200c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "3fdef1596e2ea615459a8c72f0bec47f8b033516"}, "externalDocumentId": "DocumentRef-dependency-recipe-libgcrypt", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libgcrypt-5bf23291-72b3-5400-b74e-9a6f33fdb451"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "4cfd5c55aceb5f5210e4b4dab88d034a1818e2c1"}, "externalDocumentId": "DocumentRef-dependency-recipe-libksba", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libksba-b0c12d8f-d93e-523f-9010-bd9df46c9a78"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "95d7b1653c56c9973ddaff80ea54c2f79b6ea87e"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-cross", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-cross-07500b21-b619-56d3-838e-16ca401a612f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "91c7766555c67f6e031dcf4a8420f6ed8d093a4c"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1f0552d69412400fc1285529e2a423ff52708748"}, "externalDocumentId": "DocumentRef-dependency-recipe-npth", "spdxDocument": "http://spdx.org/spdxdocs/recipe-npth-4af89506-76e0-523f-bfcf-ef0243054c0c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "3629ddc32d15446b42055bc75c324e2227389e47"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "013067c0f7715b58f66d6220e03fcb53dc909245"}, "externalDocumentId": "DocumentRef-dependency-recipe-readline", "spdxDocument": "http://spdx.org/spdxdocs/recipe-readline-c3815bde-1cd5-5568-bcc2-54e657e67a2d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "75144d2fe9c87d8dc86aecad2b41581483a80fae"}, "externalDocumentId": "DocumentRef-dependency-recipe-texinfo-dummy-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-texinfo-dummy-native-cb9012ff-d8d8-5775-98c1-f58ed5fb9573"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "256851be96dc15262363395afbb62e212078c6d1"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-gnupg", "packages": [{"SPDXID": "SPDXRef-Recipe-gnupg", "copyrightText": "NOASSERTION", "description": "A complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG allows you to encrypt and sign your data and communications; it features a versatile key management system, along with access modules for all kinds of public key directories.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:gnupg:2.4.8:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.gnupg.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-only AND LGPL-3.0-only", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnupg", "sourceInfo": "CVEs fixed: CVE-2025-30258", "summary": "GNU Privacy Guard - encryption and signing tools (2.x)", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "2.4.8"}, {"SPDXID": "SPDXRef-Download-gnupg-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "b58c80d79b04d3243ff49c1c3fc6b5f83138eb3784689563bcdd060595318616"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://www.gnupg.org/ftp/gcrypt/gnupg/gnupg-2.4.8.tar.bz2", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnupg-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-gnupg-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-gnupg-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-bzip2:SPDXRef-Recipe-bzip2"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gettext-native:SPDXRef-Recipe-gettext-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gnutls:SPDXRef-Recipe-gnutls"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libassuan:SPDXRef-Recipe-libassuan"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libgcrypt:SPDXRef-Recipe-libgcrypt"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libksba:SPDXRef-Recipe-libksba"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-cross:SPDXRef-Recipe-libtool-cross"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-npth:SPDXRef-Recipe-npth"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-readline:SPDXRef-Recipe-readline"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-texinfo-dummy-native:SPDXRef-Recipe-texinfo-dummy-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}