{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-01-17T04:14:31Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-openssh-dd4ff61a-484b-5123-87bb-3e01690699c1", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "205108cc1400fe7e78f4234181eb670b91657bea"}, "externalDocumentId": "DocumentRef-dependency-recipe-audit", "spdxDocument": "http://spdx.org/spdxdocs/recipe-audit-7b440468-12de-52f3-9c0a-01e5f80a14e3"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "187b1d4df8a73818890d6f9458a42356accdd396"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c43adae23d683893a0fcc97be7517c089e995b85"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "afe41daa3e4eb11506522578314e2338fd11e559"}, "externalDocumentId": "DocumentRef-dependency-recipe-base-files", "spdxDocument": "http://spdx.org/spdxdocs/recipe-base-files-c146050a-959a-5836-966f-98e79d6e765f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1e28949d1fe3ec12f1b8a4e5d6ecd386524b5006"}, "externalDocumentId": "DocumentRef-dependency-recipe-base-passwd", "spdxDocument": "http://spdx.org/spdxdocs/recipe-base-passwd-bb3f3152-7b84-5ef0-95bd-04186ff304e1"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "6732728c80bf4829d9f5b7294aa1c00b81e62d6b"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-x86_64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-x86_64-a54677b2-404d-5f88-948b-b1314035058d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "434052c977a757bba2fd352fd8fa582e2148c307"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "979a8827e7636b07ca32c03284ada1b9e75287bd"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "9d6da1d9e8fadc0ae5cf8f099e81aba952149de7"}, "externalDocumentId": "DocumentRef-dependency-recipe-libpam", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libpam-598348bb-de94-5567-9012-dd2dbcb34f59"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7423167111cb8d5d5c2565ef0c3e54a57ff151ac"}, "externalDocumentId": "DocumentRef-dependency-recipe-libselinux", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libselinux-d8557980-1d4b-58dd-8d30-944502bba2cb"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "40cf0169c6e8d5014e20437ba5ccd2b654f685fb"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-cross", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-cross-07500b21-b619-56d3-838e-16ca401a612f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f2ed241c1ff318c6d2b259f5d8f865f0f04154fe"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "864d9a198dd50b6f862a06fc6136672ae674df79"}, "externalDocumentId": "DocumentRef-dependency-recipe-libxcrypt", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libxcrypt-efbb6a8f-45ef-56f5-b465-7bb29439adf1"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b4ffcec8b5c5dac7dfbefdde768777b3c71213b5"}, "externalDocumentId": "DocumentRef-dependency-recipe-openssl", "spdxDocument": "http://spdx.org/spdxdocs/recipe-openssl-48156327-17ba-5e34-b313-de0c1f21058e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "079be8e1c551cbe5fe800b826a7621b88d1ec798"}, "externalDocumentId": "DocumentRef-dependency-recipe-opkg-utils", "spdxDocument": "http://spdx.org/spdxdocs/recipe-opkg-utils-f3c24e09-f6ff-5f5c-ab93-a37218f4e1a7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "9de4c82ea11a24a69ebea0773bc46acea490b8a5"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "49444f9aee06e01b164d916e9926de0a6151d7d7"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-6845d95c-0853-56dd-b976-caae5a99461e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "20ca5fb8124945b78bab62b2133c07e56c184b7e"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-native-8f9e05bf-71e7-5a75-a2e0-b8f7479cc53d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7a6b0538ce342d0be9eae16ceff5ee2737a1b0ac"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow-sysroot", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-sysroot-b6b6920a-50f2-5a27-a753-5106a834f19f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "34c7f03525ea708dc8af0df64fec12900fef3e09"}, "externalDocumentId": "DocumentRef-dependency-recipe-systemd-systemctl-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-systemd-systemctl-native-2f3d50ae-528c-5654-b3e7-3b2e2de42e45"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0da5744da3937fb3be009147d68afbb687159491"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-openssh", "packages": [{"SPDXID": "SPDXRef-Recipe-openssh", "copyrightText": "NOASSERTION", "description": "Secure rlogin/rsh/rcp/telnet replacement (OpenSSH) Ssh (Secure Shell) is a program for logging into a remote machine and for executing commands on a remote machine.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:openssh:9.6p1:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.openssh.com/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT", "licenseInfoFromFiles": ["NOASSERTION"], "name": "openssh", "sourceInfo": "CVEs fixed: CVE-2024-39894 CVE-2024-6387", "summary": "A suite of security-related network utilities based on the SSH protocol including the ssh client and sshd server", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "9.6p1"}, {"SPDXID": "SPDXRef-Download-openssh-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "910211c07255a8c5ad654391b40ee59800710dd8119dd5362de09385aa7a777c"}], "copyrightText": "NOASSERTION", "downloadLocation": "http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.6p1.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "openssh-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-openssh-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-openssh-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-audit:SPDXRef-Recipe-audit"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-base-files:SPDXRef-Recipe-base-files"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-base-passwd:SPDXRef-Recipe-base-passwd"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-x86_64:SPDXRef-Recipe-gcc-cross-x86_64"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libpam:SPDXRef-Recipe-libpam"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libselinux:SPDXRef-Recipe-libselinux"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-cross:SPDXRef-Recipe-libtool-cross"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libxcrypt:SPDXRef-Recipe-libxcrypt"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-openssl:SPDXRef-Recipe-openssl"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-opkg-utils:SPDXRef-Recipe-opkg-utils"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow:SPDXRef-Recipe-shadow"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow-native:SPDXRef-Recipe-shadow-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow-sysroot:SPDXRef-Recipe-shadow-sysroot"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-systemd-systemctl-native:SPDXRef-Recipe-systemd-systemctl-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-openssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}