{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-09-11T22:20:24Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-libssh-6b386492-f872-5335-a477-6585c7a9c4f4", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "3629989eea584880bda8ae34d1cbb42fb1226c33"}, "externalDocumentId": "DocumentRef-dependency-recipe-cmake-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-cmake-native-065aeeea-e673-57cc-a9f5-a3fe1fc2b3ea"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "6a45ea0ef0bc0e2fe1cc516bbd8aac992f4d9fe3"}, "externalDocumentId": "DocumentRef-dependency-recipe-cmocka", "spdxDocument": "http://spdx.org/spdxdocs/recipe-cmocka-65c58b13-8478-5df2-820f-60c2ad814318"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "ac1eb1117123081ee392a97fb86232b17ac334e1"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f36ecfb015456065b8f3d6c2d3c1776ee6d97cbf"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c391a7a019d04d4d168dc1b76a2dd47f9f0278d9"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a0e76cee346cfee47e95a943f48fb02ec77d6299"}, "externalDocumentId": "DocumentRef-dependency-recipe-libgcrypt", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libgcrypt-5bf23291-72b3-5400-b74e-9a6f33fdb451"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "cf8f7992d0824d7eb5d79c75f42a101a38eed81f"}, "externalDocumentId": "DocumentRef-dependency-recipe-ninja-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-ninja-native-69509a4d-51be-58e4-8b69-f8cab885e13f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "22109b55914ae7774a4eee65af645f2be4ab80d2"}, "externalDocumentId": "DocumentRef-dependency-recipe-openssl", "spdxDocument": "http://spdx.org/spdxdocs/recipe-openssl-48156327-17ba-5e34-b313-de0c1f21058e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "116e88cdf5665d69dd7dac81069de49b845e9a6f"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib", "spdxDocument": "http://spdx.org/spdxdocs/recipe-zlib-5b14b6f4-7132-524f-8cee-cdebd6df7ce5"}], "name": "recipe-libssh", "packages": [{"SPDXID": "SPDXRef-Recipe-libssh", "copyrightText": "NOASSERTION", "description": "Multiplatform C library implementing the SSHv2 and SSHv1 protocol.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:libssh:0.10.6:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.libssh.org", "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-only", "licenseInfoFromFiles": ["NOASSERTION"], "name": "libssh", "sourceInfo": "CVEs fixed: CVE-2025-5351 CVE-2025-5372 CVE-2025-5318", "summary": "Multiplatform C library implementing the SSHv2 and SSHv1 protocol", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "0.10.6"}, {"SPDXID": "SPDXRef-Download-libssh-1", "copyrightText": "NOASSERTION", "downloadLocation": "git+https://git.libssh.org/projects/libssh.git@10e09e273f69e149389b3e0e5d44b8c221c2e7f6", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "libssh-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-libssh", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-libssh-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-libssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-libssh-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-libssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-cmake-native:SPDXRef-Recipe-cmake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-cmocka:SPDXRef-Recipe-cmocka"}, {"relatedSpdxElement": "SPDXRef-Recipe-libssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-libssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-libssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-libssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libgcrypt:SPDXRef-Recipe-libgcrypt"}, {"relatedSpdxElement": "SPDXRef-Recipe-libssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-ninja-native:SPDXRef-Recipe-ninja-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-libssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-openssl:SPDXRef-Recipe-openssl"}, {"relatedSpdxElement": "SPDXRef-Recipe-libssh", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib:SPDXRef-Recipe-zlib"}], "spdxVersion": "SPDX-2.2"}