{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-11-19T02:47:58Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdoc/recipe-binutils-cross-aarch64-be42eab0-0583-5e7c-ad4f-ce56c5a2853e", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "e460551a189c03a78d93962dd74d0a93b61c1f31"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a3ddd8c9ed1fa2a88528c3236453f3bfc2647b70"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "3d312db905b022a794b9f920c54153ba4df96a2d"}, "externalDocumentId": "DocumentRef-dependency-recipe-bison-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-bison-native-d18e081d-4246-5067-9e41-c5ae29c9b9ff"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a5f287edab27e2208171a75c6b27be65b31120e2"}, "externalDocumentId": "DocumentRef-dependency-recipe-flex-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-flex-native-db3e6886-d8ff-51c5-9589-0e997748f089"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "46463caed1c10de4c27d4d427104c7e7e0697da1"}, "externalDocumentId": "DocumentRef-dependency-recipe-gettext-minimal-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-gettext-minimal-native-d0a27f93-c2cb-5d69-ab6b-b5b2d7da1769"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1d8c59dd37b2e81fea36a2d9f8d4eb3a742d0b2a"}, "externalDocumentId": "DocumentRef-dependency-recipe-gnu-config-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-gnu-config-native-7f998b5b-4a9f-5868-bb80-1279a9b986ff"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "ca0b2d931ced5fb3df9a43b74edfe850f05158ae"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0af448f91156f063866b0c101c8219eda1250f00"}, "externalDocumentId": "DocumentRef-dependency-recipe-m4-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-m4-native-5679b535-f65a-57b6-8760-ded5f4d5578c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8ec83b2c2d3a093c1da6fd27108312c6ef0a7ef2"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1d8d8abbc001a1af591ce2361bf5b2730d0e9f06"}, "externalDocumentId": "DocumentRef-dependency-recipe-texinfo-dummy-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-texinfo-dummy-native-cb9012ff-d8d8-5775-98c1-f58ed5fb9573"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c50c34b13f683c2c4a699e8a98d39cf07756b7ab"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-zlib-native-1fc15e1f-ff2b-539e-861e-33e08efd56d2"}], "name": "recipe-binutils-cross-aarch64", "packages": [{"SPDXID": "SPDXRef-Recipe-binutils-cross-aarch64", "annotations": [{"annotationDate": "2025-11-19T02:47:58Z", "annotationType": "OTHER", "annotator": "Tool: oe-spdx-creator - 1.0", "comment": "isNative"}], "copyrightText": "NOASSERTION", "description": "The GNU Binutils are a collection of binary tools. The main ones are ld (GNU Linker), and as (GNU Assembler). This package also includes addition tools such as addr2line (Converts addresses into filenames and line numbers), ar (utility for creating, modifying and extracting archives), nm (list symbols in object files), objcopy (copy and translate object files), objdump (Display object information), and other tools and related libraries.", "downloadLocation": "git://sourceware.org/git/binutils-gdb.git", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:*:binutils:2.38:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.gnu.org/software/binutils/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-only", "licenseInfoFromFiles": ["NOASSERTION"], "name": "binutils-cross-aarch64", "sourceInfo": "CVEs fixed: CVE-2023-25588 CVE-2025-1182 CVE-2025-1180 CVE-2023-25584 CVE-2023-25585 CVE-2025-5244 CVE-2025-5245 CVE-2023-1972 CVE-2023-39129 CVE-2022-45703 CVE-2023-22608 CVE-2022-38128 CVE-2022-38533 CVE-2024-53589 CVE-2022-48064 CVE-2022-38127 CVE-2022-48065 CVE-2022-48063 CVE-2025-7545 CVE-2025-7546 CVE-2025-8225 CVE-2022-47010 CVE-2022-47011 CVE-2023-1579 CVE-2022-35205 CVE-2022-47673 CVE-2019-1010204 CVE-2023-39130 CVE-2022-47695 CVE-2022-47696 CVE-2025-1178 CVE-2025-11082 CVE-2025-0840 CVE-2025-11083 CVE-2025-11081 CVE-2022-4285 CVE-2022-47008 CVE-2022-44840 CVE-2022-47007", "summary": "GNU binary utilities", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "2.38"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-binutils-cross-aarch64", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-binutils-cross-aarch64", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-binutils-cross-aarch64", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-binutils-cross-aarch64", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-bison-native:SPDXRef-Recipe-bison-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-binutils-cross-aarch64", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-flex-native:SPDXRef-Recipe-flex-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-binutils-cross-aarch64", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gettext-minimal-native:SPDXRef-Recipe-gettext-minimal-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-binutils-cross-aarch64", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gnu-config-native:SPDXRef-Recipe-gnu-config-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-binutils-cross-aarch64", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-binutils-cross-aarch64", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-m4-native:SPDXRef-Recipe-m4-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-binutils-cross-aarch64", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-binutils-cross-aarch64", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-texinfo-dummy-native:SPDXRef-Recipe-texinfo-dummy-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-binutils-cross-aarch64", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib-native:SPDXRef-Recipe-zlib-native"}], "spdxVersion": "SPDX-2.2"}