{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2026-06-10T13:51:52Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-libarchive-native-43980718-348e-546b-935b-fc9e87538c23", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "c7b3a6140264758a3f15ef33ee422fc1e4f8ce10"}, "externalDocumentId": "DocumentRef-dependency-recipe-acl-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-acl-native-90ada574-0418-501d-ab9a-814f7f8cf160"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "3296ebed5b77582c7fbc4898b2117124d5c3af6b"}, "externalDocumentId": "DocumentRef-dependency-recipe-attr-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-attr-native-a4ca441b-3630-5ca7-a9d6-f08d4bc6cd5b"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "9fbc3d848a9a1c6beea1c7b98d81b4bbbbf6cf73"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "188b618f00e611a01760746255c683c83f141f16"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "47e26d53a547dd9f675fbe109572e1eef9c36df4"}, "externalDocumentId": "DocumentRef-dependency-recipe-bzip2-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-bzip2-native-9d1fa3cb-3643-5f5e-9360-58c1eb05c68e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "39af12ab2c0d1832f0d40024feebf51a823cc7f8"}, "externalDocumentId": "DocumentRef-dependency-recipe-e2fsprogs-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-e2fsprogs-native-75777574-9a0a-53b1-836b-9df344bcc3ee"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "74d345fa10c8507a41579f6cc8bed3481ff88816"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e56e1784e1aa702dc0bf5b4d18299d3238282160"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f6c7657802a47ddb3b49201ee5b5daa84641a952"}, "externalDocumentId": "DocumentRef-dependency-recipe-xz-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-xz-native-fb9b6d7a-1472-5337-888f-d4bf9e719144"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "34544320f51721f7a589d4f05afa6fdccd394d8a"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-native-1fc15e1f-ff2b-539e-861e-33e08efd56d2"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8ff098f5e0e71209dcf547ec40f645b9da93d619"}, "externalDocumentId": "DocumentRef-dependency-recipe-zstd-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zstd-native-ccc925e5-9b0f-5106-b595-cbfe0152bf06"}], "name": "recipe-libarchive-native", "packages": [{"SPDXID": "SPDXRef-Recipe-libarchive-native", "annotations": [{"annotationDate": "2026-06-10T13:51:52Z", "annotationType": "OTHER", "annotator": "Tool: oe-spdx-creator - 1.0", "comment": "isNative"}], "copyrightText": "NOASSERTION", "description": "C library and command-line tools for reading and writing tar, cpio, zip, ISO, and other archive formats", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:libarchive:3.7.9:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.libarchive.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "licenseInfoFromFiles": ["NOASSERTION"], "name": "libarchive-native", "sourceInfo": "CVEs fixed: CVE-2025-5915 CVE-2025-5917 CVE-2025-60753 CVE-2025-5918 CVE-2025-5914 CVE-2025-5916", "summary": "Support for reading various archive formats", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "3.7.9"}, {"SPDXID": "SPDXRef-Download-libarchive-native-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "aa90732c5a6bdda52fda2ad468ac98d75be981c15dde263d7b5cf6af66fd009f"}], "copyrightText": "NOASSERTION", "downloadLocation": "http://libarchive.org/downloads/libarchive-3.7.9.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "libarchive-native-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-libarchive-native-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-libarchive-native-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-acl-native:SPDXRef-Recipe-acl-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-attr-native:SPDXRef-Recipe-attr-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-bzip2-native:SPDXRef-Recipe-bzip2-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-e2fsprogs-native:SPDXRef-Recipe-e2fsprogs-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-xz-native:SPDXRef-Recipe-xz-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib-native:SPDXRef-Recipe-zlib-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libarchive-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zstd-native:SPDXRef-Recipe-zstd-native"}], "spdxVersion": "SPDX-2.2"}