{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2026-06-06T17:50:27Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-gnupg-491982f3-f960-5a2a-940c-b1d5fa8abd81", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "2f1def5ba124a80e520c1a6119e60c082533ff57"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b60b3dc01f054145f775d7a7b0753d5c93b40fa6"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "6dd2620fb80710acfdf542749cc032c185ae1124"}, "externalDocumentId": "DocumentRef-dependency-recipe-bzip2", "spdxDocument": "http://spdx.org/spdxdocs/recipe-bzip2-48d77de4-d76a-580e-82f3-6bfefd5b9795"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5e7b82fdb5ea91ad9e2291fc8488823d66a8dcd1"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e72bb809858374840bfb00f2564d5d43ed5007a3"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b548a28ff01023c25e69c69187cc9118ddb15414"}, "externalDocumentId": "DocumentRef-dependency-recipe-gettext-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gettext-native-bc0b5e4e-69c4-5def-955c-45419d0a98ee"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7518d2d9652bd46aa078d2ecb538b0eecd05d90a"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "fd519a82d088dd9adf92e965e229879613ab3375"}, "externalDocumentId": "DocumentRef-dependency-recipe-gnutls", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gnutls-e34d366c-a9b2-5b9b-b4a9-0aabdc1cc230"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d7630e54807065ecbce5b4cb5f2c118b1a7ffc45"}, "externalDocumentId": "DocumentRef-dependency-recipe-libassuan", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libassuan-78030568-a2de-5118-b65e-c70ed786200c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "68e92c36d8313d906c1a364794343db28785f186"}, "externalDocumentId": "DocumentRef-dependency-recipe-libgcrypt", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libgcrypt-5bf23291-72b3-5400-b74e-9a6f33fdb451"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "db92b29c6156126ff4789ff9cb60844efcffbf59"}, "externalDocumentId": "DocumentRef-dependency-recipe-libksba", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libksba-b0c12d8f-d93e-523f-9010-bd9df46c9a78"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "dd9f9d2aed6ac4327ab0eb9d623ae7b1c40d0929"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-cross", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-cross-07500b21-b619-56d3-838e-16ca401a612f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "74108bb6aecd053b54dd47406561f6ad25137512"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "452b0c6d235f5c2427229d362119a2f13e2d752e"}, "externalDocumentId": "DocumentRef-dependency-recipe-npth", "spdxDocument": "http://spdx.org/spdxdocs/recipe-npth-4af89506-76e0-523f-bfcf-ef0243054c0c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "31be208c403bd087e25bd71408ffec1f19de02a3"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "23eecd450d0260d7a9582774009837ca41d5e387"}, "externalDocumentId": "DocumentRef-dependency-recipe-readline", "spdxDocument": "http://spdx.org/spdxdocs/recipe-readline-c3815bde-1cd5-5568-bcc2-54e657e67a2d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "baf29d262992629774df12ba7cb614cc53a3c5ca"}, "externalDocumentId": "DocumentRef-dependency-recipe-texinfo-dummy-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-texinfo-dummy-native-cb9012ff-d8d8-5775-98c1-f58ed5fb9573"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "2e61f180f772a9f98dc5afc14b1b9ef703159b48"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-gnupg", "packages": [{"SPDXID": "SPDXRef-Recipe-gnupg", "copyrightText": "NOASSERTION", "description": "A complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG allows you to encrypt and sign your data and communications; it features a versatile key management system, along with access modules for all kinds of public key directories.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:gnupg:2.4.8:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.gnupg.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-only AND LGPL-3.0-only", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnupg", "sourceInfo": "CVEs fixed: CVE-2025-30258", "summary": "GNU Privacy Guard - encryption and signing tools (2.x)", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "2.4.8"}, {"SPDXID": "SPDXRef-Download-gnupg-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "b58c80d79b04d3243ff49c1c3fc6b5f83138eb3784689563bcdd060595318616"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://www.gnupg.org/ftp/gcrypt/gnupg/gnupg-2.4.8.tar.bz2", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnupg-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-gnupg-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-gnupg-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-bzip2:SPDXRef-Recipe-bzip2"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gettext-native:SPDXRef-Recipe-gettext-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gnutls:SPDXRef-Recipe-gnutls"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libassuan:SPDXRef-Recipe-libassuan"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libgcrypt:SPDXRef-Recipe-libgcrypt"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libksba:SPDXRef-Recipe-libksba"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-cross:SPDXRef-Recipe-libtool-cross"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-npth:SPDXRef-Recipe-npth"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-readline:SPDXRef-Recipe-readline"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-texinfo-dummy-native:SPDXRef-Recipe-texinfo-dummy-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}