{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2024-04-29T21:23:33Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdoc/recipe-tiff-native-e2284c03-2452-5b53-9f62-38dd8109e66d", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "243af0346a4c58ba43797520d063066816c7078f"}, "externalDocumentId": "DocumentRef-dependency-recipe-autoconf-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-autoconf-native-124e4a29-7bee-575a-9a44-2226fa6af9c9"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "6ce8b037fd4918e113b27bda600e1b246b30894d"}, "externalDocumentId": "DocumentRef-dependency-recipe-automake-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-automake-native-e3046935-37af-5c2e-b371-e883e5ef1216"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "bf8a75800fafe7095546511408309a6c1ca6343f"}, "externalDocumentId": "DocumentRef-dependency-recipe-libjpeg-turbo-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-libjpeg-turbo-native-6622758d-d6ea-5ea0-9201-df92f9ccc341"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1d39c05e023bc816ff28f2e0cb1f4cf0c15d3eda"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "f88dfdfad92fa40d8c549e39329edf8806b8b768"}, "externalDocumentId": "DocumentRef-dependency-recipe-xz-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-xz-native-fb9b6d7a-1472-5337-888f-d4bf9e719144"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "baac28c0a02a88154e21562d3dcf63cee03adf35"}, "externalDocumentId": "DocumentRef-dependency-recipe-zlib-native", "spdxDocument": "http://spdx.org/spdxdoc/recipe-zlib-native-1fc15e1f-ff2b-539e-861e-33e08efd56d2"}], "name": "recipe-tiff-native", "packages": [{"SPDXID": "SPDXRef-Recipe-tiff-native", "annotations": [{"annotationDate": "2024-04-29T21:23:33Z", "annotationType": "OTHER", "annotator": "Tool: oe-spdx-creator - 1.0", "comment": "isNative"}], "copyrightText": "NOASSERTION", "description": "Library provides support for the Tag Image File Format (TIFF), a widely used format for storing image data.  This library provide means to easily access and create TIFF image files.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:libtiff:4.6.0:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.libtiff.org/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "licenseInfoFromFiles": ["NOASSERTION"], "name": "tiff-native", "sourceInfo": "CVEs fixed: CVE-2023-6277 CVE-2023-52356 CVE-2023-52355 CVE-2015-7313 CVE-2023-6228", "summary": "Provides support for the Tag Image File Format (TIFF)", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "4.6.0"}, {"SPDXID": "SPDXRef-Download-tiff-native-1", "checksums": [{"algorithm": "SHA256", "checksumValue": "88b3979e6d5c7e32b50d7ec72fb15af724f6ab2cbf7e10880c360a77e4b5d99a"}], "copyrightText": "NOASSERTION", "downloadLocation": "http://download.osgeo.org/libtiff/tiff-4.6.0.tar.gz", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "tiff-native-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-tiff-native-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-tiff-native-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-autoconf-native:SPDXRef-Recipe-autoconf-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-automake-native:SPDXRef-Recipe-automake-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libjpeg-turbo-native:SPDXRef-Recipe-libjpeg-turbo-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-xz-native:SPDXRef-Recipe-xz-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-tiff-native", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-zlib-native:SPDXRef-Recipe-zlib-native"}], "spdxVersion": "SPDX-2.2"}