{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2026-06-06T17:35:55Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-go-runtime-393054ae-505a-5f30-8e3b-75c9021ab3f5", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "7259abb4a2a56bde151b312099d240962f08c357"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "27f540a1d61a62fce28b7c34eef673bac5d28ecb"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8c3240e7c39b64c99d21f053c5935a76dbfbe3c0"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "fcd3b84ceb0f5b52b3eb508b2dfd388a47e89b9a"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-binary-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-binary-native-6f599abf-8971-5f57-816c-3f71def8a65b"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "e8e020a2f91ee60874a47e37ad5c8fdefaeb59d0"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-cross-cortexa72-cortexa53", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-cross-cortexa72-cortexa53-2c98fa9b-fac4-5281-8341-8dc08e1c6c3a"}], "name": "recipe-go-runtime", "packages": [{"SPDXID": "SPDXRef-Recipe-go-runtime", "copyrightText": "NOASSERTION", "description": " The Go programming language is an open source project to make  programmers more productive. Go is expressive, concise, clean, and efficient. Its concurrency mechanisms make it easy to write programs that get the most out of multicore and networked machines, while its novel type system enables flexible and modular program construction. Go compiles quickly to machine code yet has the convenience of garbage collection and the power of run-time reflection. It's a fast, statically typed, compiled language that feels like a dynamically typed, interpreted language.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:golang:go:1.22.12:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": " http://golang.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "licenseInfoFromFiles": ["NOASSERTION"], "name": "go-runtime", "sourceInfo": "CVEs fixed: CVE-2025-61729 CVE-2025-58189 CVE-2025-58185 CVE-2025-61727 CVE-2025-47907 CVE-2025-61723 CVE-2025-47912 CVE-2025-61724 CVE-2025-47906 CVE-2025-58188 CVE-2025-4674 CVE-2025-58187 CVE-2025-22870 CVE-2025-22871 CVE-2025-4673", "summary": "Go programming language compiler", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "1.22.12"}, {"SPDXID": "SPDXRef-Download-go-runtime-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "012a7e1f37f362c0918c1dfa3334458ac2da1628c4b9cf4d9ca02db986e17d71"}], "copyrightText": "NOASSERTION", "downloadLocation": "https://golang.org/dl/go1.22.12.src.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "go-runtime-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-go-runtime-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-go-runtime-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-binary-native:SPDXRef-Recipe-go-binary-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-go-runtime", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-cross-cortexa72-cortexa53:SPDXRef-Recipe-go-cross-cortexa72-cortexa53"}], "spdxVersion": "SPDX-2.2"}