{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-04-29T10:55:18Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdoc/recipe-curl-native-acd62102-415e-50b8-8fff-b573056aa44e", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "07b43511fda61e63dbedea89dfc424a1b0330599"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b520f984e546c14cc5084929880342028348e1ca"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "3dd7d232d39d22280b3f47a34675a1005ddfdf3b"}, "externalDocumentId": "DocumentRef-dependency-recipe-gdbm-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-gdbm-native-41413a0a-1570-5d00-a5f5-8d068dbf5997"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "baaf7502ea02cfb020bf259e079ab3afe7cbea31"}, "externalDocumentId": "DocumentRef-dependency-recipe-gettext-minimal-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-gettext-minimal-native-d0a27f93-c2cb-5d69-ab6b-b5b2d7da1769"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "15997b8c8d6e2db87796b6ce9b9cd8028007116a"}, "externalDocumentId": "DocumentRef-dependency-recipe-gnu-config-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-gnu-config-native-7f998b5b-4a9f-5868-bb80-1279a9b986ff"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "28c659fa2cf2ef2c6f6599acf7d1fa372195a802"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "6e7e9eaac64ecb8f88ab17c09e7712c8f43c9c2c"}, "externalDocumentId": "DocumentRef-dependency-recipe-m4-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-m4-native-5679b535-f65a-57b6-8760-ded5f4d5578c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f1fdcc876e724d4a98ba5d486820e6b15d60f396"}, "externalDocumentId": "DocumentRef-dependency-recipe-make-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-make-native-df9bc34d-be65-55f4-94e1-8830884fb2fe"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7dc42ec1055a7b0050c487513cf993b39f21a7f2"}, "externalDocumentId": "DocumentRef-dependency-recipe-openssl-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-openssl-native-29712d98-dace-570a-bc97-e67cefc5997d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "ee542d4a99b05975492606cd8b041db1ea16e449"}, "externalDocumentId": "DocumentRef-dependency-recipe-perl-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-perl-native-ca4779ec-f2da-58e4-b2de-b4093de4d855"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "ec1cbcfefe6a825797a0894ca6e839bcce6269ce"}, "externalDocumentId": "DocumentRef-dependency-recipe-perlcross-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-perlcross-native-2c1f6985-82ff-5005-b2a1-d04a20bf908d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "406503e3726bd81b20fec4bf7e918ce6398f5361"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "4b85e3e5bed2a00e3763a9c726c42504c675b188"}, "externalDocumentId": "DocumentRef-dependency-recipe-texinfo-dummy-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-texinfo-dummy-native-cb9012ff-d8d8-5775-98c1-f58ed5fb9573"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "94e0f19394e07efc39d0cc38ee56f8b4d15364ef"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-zlib-native-1fc15e1f-ff2b-539e-861e-33e08efd56d2"}], "name": "recipe-curl-native", "packages": [{"SPDXID": "SPDXRef-Recipe-curl-native", "annotations": [{"annotationDate": "2025-04-29T10:55:18Z", "annotationType": "OTHER", "annotator": "Tool: oe-spdx-creator - 1.0", "comment": "isNative"}], "copyrightText": "NOASSERTION", "description": "It uses URL syntax to transfer data to and from servers. curl is a widely used because of its ability to be flexible and complete complex tasks. For example, you can use curl for things like user authentication, HTTP post, SSL connections, proxy support, FTP uploads, and more!", "downloadLocation": "https://curl.se/download/curl-7.82.0.tar.xz", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:haxx:curl:7.82.0:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}, {"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:haxx:libcurl:7.82.0:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}, {"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:curl:curl:7.82.0:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}, {"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:curl:libcurl:7.82.0:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}, {"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:libcurl:libcurl:7.82.0:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}, {"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:daniel_stenberg:curl:7.82.0:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "https://curl.se/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "curl", "licenseInfoFromFiles": ["NOASSERTION"], "name": "curl-native", "sourceInfo": "CVEs fixed: CVE-2024-7264 CVE-2023-38546 CVE-2023-38545 CVE-2022-27775 CVE-2022-27774 CVE-2022-27776 CVE-2022-27779 CVE-2023-28319 CVE-2024-8096 CVE-2023-27538 CVE-2024-9681 CVE-2023-23915 CVE-2023-23914 CVE-2023-27533 CVE-2023-23916 CVE-2022-30115 CVE-2023-27536 CVE-2023-27535 CVE-2023-27534 CVE-2024-2398 CVE-2023-28322 CVE-2022-22576 CVE-2023-28320 CVE-2023-28321 CVE-2022-43552 CVE-2022-43551 CVE-2023-46219 CVE-2022-32208 CVE-2022-32207 CVE-2022-32206 CVE-2022-32205 CVE-2022-32221 CVE-2023-46218 CVE-2022-42915 CVE-2022-42916 CVE-2022-27780 CVE-2022-27781 CVE-2022-27782 CVE-2022-35252", "summary": "Command line tool and library for client-side URL transfers", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "7.82.0"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gdbm-native:SPDXRef-Recipe-gdbm-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gettext-minimal-native:SPDXRef-Recipe-gettext-minimal-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gnu-config-native:SPDXRef-Recipe-gnu-config-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-m4-native:SPDXRef-Recipe-m4-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-make-native:SPDXRef-Recipe-make-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-openssl-native:SPDXRef-Recipe-openssl-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-perl-native:SPDXRef-Recipe-perl-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-perlcross-native:SPDXRef-Recipe-perlcross-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-texinfo-dummy-native:SPDXRef-Recipe-texinfo-dummy-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-curl-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib-native:SPDXRef-Recipe-zlib-native"}], "spdxVersion": "SPDX-2.2"}