{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-11-10T22:23:12Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-gnutls-native-0be40366-130d-5a32-aafe-676345725e9e", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "ed28692970a9a7e2f2db959433155bee399f41b4"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d469cc95ccab86c6dec9e0299ad118dd11ffb27a"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "ebef9b6f8ed47dba4b9bfc4949479fdab1ae9958"}, "externalDocumentId": "DocumentRef-dependency-recipe-gettext-minimal-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gettext-minimal-native-d0a27f93-c2cb-5d69-ab6b-b5b2d7da1769"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "60771cc78d4f82f9d8e2fc899bcab6d7f12065d1"}, "externalDocumentId": "DocumentRef-dependency-recipe-gmp-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gmp-native-008a73c2-0509-5b24-a32c-a84f417c6f76"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f2fae4c25ed5cfcca4dc7ac8c465762b62b9c7e7"}, "externalDocumentId": "DocumentRef-dependency-recipe-gtk-doc-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gtk-doc-native-5263677d-0962-5f28-a0fb-1308d67c5da7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7fd770663267e3d02a68a61d92602c5baf23b765"}, "externalDocumentId": "DocumentRef-dependency-recipe-libidn2-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libidn2-native-04788e3c-4a0c-5a85-bfa7-e7abae94d85f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5ab16ae08f8cc535415d64d291a8a07b9b47a96c"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtasn1-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtasn1-native-8c740967-8f95-571e-9be6-d0bd3c4186c8"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "dce1fdcd604285464184044415090d947dad6260"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8894f055347d29631fcccba12dcd1253f16b4167"}, "externalDocumentId": "DocumentRef-dependency-recipe-libunistring-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libunistring-native-5d624273-d6d1-5bce-8df3-644ee7f4707a"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f5daee57a5e223d91f6d243c270babf69c8c3595"}, "externalDocumentId": "DocumentRef-dependency-recipe-nettle-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-nettle-native-31370ab6-9dbe-5100-8bc0-76801c8c3a0e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8b0368678542e8b25692ed8eb191af5854db4485"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8b42c1a90e4d381d7229739f1d9c9fd5741dbac0"}, "externalDocumentId": "DocumentRef-dependency-recipe-python3-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-python3-native-34cc7325-70e1-5a3a-873a-66b0c1f8d193"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0e4d3854b789a5f16c29021f2d65586d860f8d26"}, "externalDocumentId": "DocumentRef-dependency-recipe-texinfo-dummy-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-texinfo-dummy-native-cb9012ff-d8d8-5775-98c1-f58ed5fb9573"}], "name": "recipe-gnutls-native", "packages": [{"SPDXID": "SPDXRef-Recipe-gnutls-native", "annotations": [{"annotationDate": "2025-11-10T22:23:12Z", "annotationType": "OTHER", "annotator": "Tool: oe-spdx-creator - 1.0", "comment": "isNative"}], "copyrightText": "NOASSERTION", "description": "a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:gnutls:3.8.4:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "https://gnutls.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnutls-native", "sourceInfo": "CVEs fixed: CVE-2024-12243 CVE-2025-6395 CVE-2025-32989 CVE-2025-32988 CVE-2025-32990", "summary": "GNU Transport Layer Security Library", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "3.8.4"}, {"SPDXID": "SPDXRef-Download-gnutls-native-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "2bea4e154794f3f00180fa2a5c51fe8b005ac7a31cd58bd44cdfa7f36ebc3a9b"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.4.tar.xz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "gnutls-native-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-gnutls-native-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-gnutls-native-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gettext-minimal-native:SPDXRef-Recipe-gettext-minimal-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gmp-native:SPDXRef-Recipe-gmp-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gtk-doc-native:SPDXRef-Recipe-gtk-doc-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libidn2-native:SPDXRef-Recipe-libidn2-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtasn1-native:SPDXRef-Recipe-libtasn1-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libunistring-native:SPDXRef-Recipe-libunistring-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-nettle-native:SPDXRef-Recipe-nettle-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-python3-native:SPDXRef-Recipe-python3-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-gnutls-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-texinfo-dummy-native:SPDXRef-Recipe-texinfo-dummy-native"}], "spdxVersion": "SPDX-2.2"}