{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2026-10-20T12:17:05Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-gnupg-491982f3-f960-5a2a-940c-b1d5fa8abd81", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "46f6f6163c31f7477cf7c370c13479c479f51055"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "824bc2e3f2f1ed2d19d98a4c204b93900eae5faa"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f56f79d759e8e3a9a16024bde8eed1794f56f951"}, "externalDocumentId": "DocumentRef-dependency-recipe-bzip2", "spdxDocument": "http://spdx.org/spdxdocs/recipe-bzip2-48d77de4-d76a-580e-82f3-6bfefd5b9795"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "03def57800c1f1fb09af550ccb3dbcb569879bff"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "55a2f3ed40cb19687abaaede46245fa88cb079c5"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5d0059c8cca95bce52e65de1aad2cc9be8a81a14"}, "externalDocumentId": "DocumentRef-dependency-recipe-gettext-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gettext-native-bc0b5e4e-69c4-5def-955c-45419d0a98ee"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0f8f2ed9e2627f546c5ae56571a211668c6d4bdc"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d7b86e2074d8620c567e9854e11bb14293eb9f21"}, "externalDocumentId": "DocumentRef-dependency-recipe-gnutls", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gnutls-e34d366c-a9b2-5b9b-b4a9-0aabdc1cc230"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "48b7a2e586e5a5fa9390103f5c372d0065576ea5"}, "externalDocumentId": "DocumentRef-dependency-recipe-libassuan", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libassuan-78030568-a2de-5118-b65e-c70ed786200c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "17cddc74235bfe44f1c6e6139a20cdb1950c3c43"}, "externalDocumentId": "DocumentRef-dependency-recipe-libgcrypt", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libgcrypt-5bf23291-72b3-5400-b74e-9a6f33fdb451"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "4babdeab4e81b9e2a8ed5de18705fcef073da6be"}, "externalDocumentId": "DocumentRef-dependency-recipe-libksba", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libksba-b0c12d8f-d93e-523f-9010-bd9df46c9a78"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "2d83ba845f7928432c0f007dc9a256a0a505594d"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-cross", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-cross-07500b21-b619-56d3-838e-16ca401a612f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f051b3f2fec96b610c2f83897f10e4fad0f9df5b"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "459f91ee8af13d2ee7cf8ca223662d3673113a9b"}, "externalDocumentId": "DocumentRef-dependency-recipe-npth", "spdxDocument": "http://spdx.org/spdxdocs/recipe-npth-4af89506-76e0-523f-bfcf-ef0243054c0c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "680d92baf5fd05e70349b4c1844d479810c57ed8"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f5999acc027c2b4e10881f015422a1a3082fadb1"}, "externalDocumentId": "DocumentRef-dependency-recipe-readline", "spdxDocument": "http://spdx.org/spdxdocs/recipe-readline-c3815bde-1cd5-5568-bcc2-54e657e67a2d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "6a3c18f1fec13bad2e486f71711d98fb4ab2c00e"}, "externalDocumentId": "DocumentRef-dependency-recipe-texinfo-dummy-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-texinfo-dummy-native-cb9012ff-d8d8-5775-98c1-f58ed5fb9573"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "aa7c682df9f9fc693cf4d3647a00be892f6b2027"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-gnupg", "packages": [{"SPDXID": "SPDXRef-Recipe-gnupg", "copyrightText": "NOASSERTION", "description": "A complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG allows you to encrypt and sign your data and communications; it features a versatile key management system, along with access modules for all kinds of public key directories.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:gnupg:2.4.9:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.gnupg.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-only AND LGPL-3.0-only", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnupg", "sourceInfo": "CVEs fixed: CVE-2025-30258 CVE-2026-24882", "summary": "GNU Privacy Guard - encryption and signing tools (2.x)", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "2.4.9"}, {"SPDXID": "SPDXRef-Download-gnupg-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "dd17ab2e9a04fd79d39d853f599cbc852062ddb9ab52a4ddeb4176fd8b302964"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://www.gnupg.org/ftp/gcrypt/gnupg/gnupg-2.4.9.tar.bz2", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnupg-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-gnupg-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-gnupg-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-bzip2:SPDXRef-Recipe-bzip2"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gettext-native:SPDXRef-Recipe-gettext-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gnutls:SPDXRef-Recipe-gnutls"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libassuan:SPDXRef-Recipe-libassuan"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libgcrypt:SPDXRef-Recipe-libgcrypt"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libksba:SPDXRef-Recipe-libksba"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-cross:SPDXRef-Recipe-libtool-cross"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-npth:SPDXRef-Recipe-npth"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-readline:SPDXRef-Recipe-readline"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-texinfo-dummy-native:SPDXRef-Recipe-texinfo-dummy-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnupg", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}