{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2024-03-28T04:35:08Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdoc/recipe-tiff-native-e2284c03-2452-5b53-9f62-38dd8109e66d", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "0fcd1fb0270a3bbad764c3d7861e0137e85a5fa2"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c4f0d41b689c9773859f21d0229a74445252be81"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "db77946fdb0de87c826031947a309bb742225e27"}, "externalDocumentId": "DocumentRef-dependency-recipe-libjpeg-turbo-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-libjpeg-turbo-native-6622758d-d6ea-5ea0-9201-df92f9ccc341"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0cb12d320148231f3084e2f055b0563ca050b50e"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f2af7770ad16c401c48a89b0b869011d5a81f5e9"}, "externalDocumentId": "DocumentRef-dependency-recipe-xz-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-xz-native-fb9b6d7a-1472-5337-888f-d4bf9e719144"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "ef226241e4a46a41c73fbbe4377c32a4eb4a712e"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-zlib-native-1fc15e1f-ff2b-539e-861e-33e08efd56d2"}], "name": "recipe-tiff-native", "packages": [{"SPDXID": "SPDXRef-Recipe-tiff-native", "annotations": [{"annotationDate": "2024-03-28T04:35:08Z", "annotationType": "OTHER", "annotator": "Tool: oe-spdx-creator - 1.0", "comment": "isNative"}], "copyrightText": "NOASSERTION", "description": "Library provides support for the Tag Image File Format (TIFF), a widely used format for storing image data.  This library provide means to easily access and create TIFF image files.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:libtiff:4.6.0:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.libtiff.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "licenseInfoFromFiles": ["NOASSERTION"], "name": "tiff-native", "sourceInfo": "CVEs fixed: CVE-2023-6277 CVE-2023-6228 CVE-2023-52355 CVE-2023-52356 CVE-2015-7313", "summary": "Provides support for the Tag Image File Format (TIFF)", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "4.6.0"}, {"SPDXID": "SPDXRef-Download-tiff-native-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "88b3979e6d5c7e32b50d7ec72fb15af724f6ab2cbf7e10880c360a77e4b5d99a"}], "copyrightText": "NOASSERTION", "downloadLocation": "http://download.osgeo.org/libtiff/tiff-4.6.0.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "tiff-native-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-tiff-native-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-tiff-native-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libjpeg-turbo-native:SPDXRef-Recipe-libjpeg-turbo-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-xz-native:SPDXRef-Recipe-xz-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib-native:SPDXRef-Recipe-zlib-native"}], "spdxVersion": "SPDX-2.2"}