{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2026-06-06T18:00:00Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-gnupg-491982f3-f960-5a2a-940c-b1d5fa8abd81", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "2f7dfdc78e3fc472e14342a38dc7c93b0e77d401"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "9e93850a17377f8a673f40b0baa3ddd5a287b306"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "4567bd803475844772860fa62739de1a5786b50e"}, "externalDocumentId": "DocumentRef-dependency-recipe-bzip2", "spdxDocument": "http://spdx.org/spdxdocs/recipe-bzip2-48d77de4-d76a-580e-82f3-6bfefd5b9795"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d296762c233f157e4d720db8e9a6356be17f0b3f"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "9cf53ce36d31656610b32136ebc4613391786e44"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "2b044727b7c9bd2c21cf4fc00d75c2bc7b8453cc"}, "externalDocumentId": "DocumentRef-dependency-recipe-gettext-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gettext-native-bc0b5e4e-69c4-5def-955c-45419d0a98ee"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5bf49e7815632a4cf96599f363ea890671350f90"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1dc46c1b4af861310633993b6ec1756763ef061c"}, "externalDocumentId": "DocumentRef-dependency-recipe-gnutls", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gnutls-e34d366c-a9b2-5b9b-b4a9-0aabdc1cc230"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "971462382c5ad38862add2efd78fb0c3c02759b2"}, "externalDocumentId": "DocumentRef-dependency-recipe-libassuan", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libassuan-78030568-a2de-5118-b65e-c70ed786200c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b626c9ba7b4323e85aa7a19d0dd9cff3cf672282"}, "externalDocumentId": "DocumentRef-dependency-recipe-libgcrypt", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libgcrypt-5bf23291-72b3-5400-b74e-9a6f33fdb451"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1d03a97e3fc84e19349ddd844642c7d7c2cf4127"}, "externalDocumentId": "DocumentRef-dependency-recipe-libksba", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libksba-b0c12d8f-d93e-523f-9010-bd9df46c9a78"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0ba66143ee4164197f31de0bad8e7c0a09c4b24c"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-cross", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-cross-07500b21-b619-56d3-838e-16ca401a612f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "4d4d5a20c13e546413ac911e09f1392cee6685f8"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b641bd85bb6e168e5085b48374c29dcc27d4b79f"}, "externalDocumentId": "DocumentRef-dependency-recipe-npth", "spdxDocument": "http://spdx.org/spdxdocs/recipe-npth-4af89506-76e0-523f-bfcf-ef0243054c0c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7a9136926f183c0b08fee2ef498fb6d5e8401df0"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b4be6b4f749441abe8507546acd28ea533e728c6"}, "externalDocumentId": "DocumentRef-dependency-recipe-readline", "spdxDocument": "http://spdx.org/spdxdocs/recipe-readline-c3815bde-1cd5-5568-bcc2-54e657e67a2d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "75144d2fe9c87d8dc86aecad2b41581483a80fae"}, "externalDocumentId": "DocumentRef-dependency-recipe-texinfo-dummy-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-texinfo-dummy-native-cb9012ff-d8d8-5775-98c1-f58ed5fb9573"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "118aaeaacd2c7c571397578deddd2aa9ff8f30c2"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-gnupg", "packages": [{"SPDXID": "SPDXRef-Recipe-gnupg", "copyrightText": "NOASSERTION", "description": "A complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG allows you to encrypt and sign your data and communications; it features a versatile key management system, along with access modules for all kinds of public key directories.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:gnupg:2.4.8:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.gnupg.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-only AND LGPL-3.0-only", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnupg", "sourceInfo": "CVEs fixed: CVE-2025-30258", "summary": "GNU Privacy Guard - encryption and signing tools (2.x)", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "2.4.8"}, {"SPDXID": "SPDXRef-Download-gnupg-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "b58c80d79b04d3243ff49c1c3fc6b5f83138eb3784689563bcdd060595318616"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://www.gnupg.org/ftp/gcrypt/gnupg/gnupg-2.4.8.tar.bz2", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnupg-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-gnupg-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-gnupg-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-bzip2:SPDXRef-Recipe-bzip2"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gettext-native:SPDXRef-Recipe-gettext-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gnutls:SPDXRef-Recipe-gnutls"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libassuan:SPDXRef-Recipe-libassuan"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libgcrypt:SPDXRef-Recipe-libgcrypt"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libksba:SPDXRef-Recipe-libksba"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-cross:SPDXRef-Recipe-libtool-cross"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-npth:SPDXRef-Recipe-npth"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-readline:SPDXRef-Recipe-readline"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-texinfo-dummy-native:SPDXRef-Recipe-texinfo-dummy-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}