type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-08T18:37:56Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-08T18:37:56Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-b6bfb2a1-4f9a-4f20-a96a-8312bc1ad0da-specv3/SPDXRef-gnrtd139
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd140
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd914
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd915
from: libpng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd187
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd188
from: bzip2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd921
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd922
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1149
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1150
from: openjpeg2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd63
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd64
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd112
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd113
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd917
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd915
from: libpng
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd178
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd179
from: xz-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd954
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd51
from: lcms2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1365
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1366
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd939
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd51
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1044
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd775
from: OpenEXR-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1368
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1369
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd75
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd76
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd142
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd143
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd190
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd188
from: bzip2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1063
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1064
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd322
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd51
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd956
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd51
from: lcms2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1168
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1169
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1171
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1172
from: ghostscript
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd66
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd67
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd930
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd931
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd156
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd157
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd324
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd51
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd933
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd934
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1146
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1147
from: openjpeg2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd918
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd919
from: cairo
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd966
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd967
from: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd948
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd949
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1060
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1061
from: gdk-pixbuf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd221
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd222
from: libgomp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd905
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd51
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd181
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd179
from: xz-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd969
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd967
from: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1042
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd775
from: OpenEXR-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd945
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd946
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd937
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd51
from: harfbuzz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd72
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd73
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd115
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd116
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd159
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd160
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd907
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd51
from: libX11
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd218
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd219
from: libgomp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1356
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: lcms2
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1364
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libpng
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1350
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1353
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xz-libs
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1348
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxml2
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1363
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1361
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cairo
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1357
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: OpenEXR-libs
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1347
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ghostscript
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1345
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdk-pixbuf2
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1344
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1351
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openjpeg2
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1355
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1359
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bzip2
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1352
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1360
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1358
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libX11
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1362
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgomp
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1346
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libtiff
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1354
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: harfbuzz
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1349
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: freetype
from: ImageMagick
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd157
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1064
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1169
type: simplelicensing_LicenseExpression
simplelicensing license expression: AGPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd775
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd949
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND (FTL OR GPL-2.0-or-later) AND MIT-Modern-Variant AND Zlib)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd919
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd113
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd931
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd160
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd922
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2 or MPLv1.1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1147
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd179
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-3.0-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1061
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd946
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND (FTL OR GPL-2.0-or-later) AND MIT AND MIT-Modern-Variant AND Zlib)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1150
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd140
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd219
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd222
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd116
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1172
type: simplelicensing_LicenseExpression
simplelicensing license expression: AGPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd143
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd64
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd967
type: simplelicensing_LicenseExpression
simplelicensing license expression: libtiff
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd51
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd934
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd67
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd915
type: simplelicensing_LicenseExpression
simplelicensing license expression: Zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd73
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd188
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-4-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1366
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MIT AND ImageMagick)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1369
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MIT AND ImageMagick)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1170
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd141
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd906
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd65
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd932
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1367
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd114
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd180
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd968
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd158
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd189
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd938
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd323
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1148
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd947
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1043
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd220
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd916
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd955
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1062
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd920
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1055
type: software_Package
supplied by: SPDXRef-gnrtd1062
software download location: NOASSERTION
summary: gdk is a multi-platform toolkit for creating graphical user interfaces.
software package version: 0:2.42.10-5.oe2403sp1
software home page: https://gitlab.gnome.org/GNOME/gdk-pixbuf
description: gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.
name: gdk-pixbuf2
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/gdk-pixbuf2@2.42.10-5.oe2403sp1?arch=x86_64&epoch=0&upstream=gdk-pixbuf2-2.42.10-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd184
type: software_Package
supplied by: SPDXRef-gnrtd189
software download location: NOASSERTION
summary: A high-quality data compressor
software package version: 0:1.0.8-9.oe2403sp1
software home page: https://www.sourceware.org/bzip2/
description: bzip2 is a freely available, patent free, high-quality data compressor. It typically compresses files to within 10% to 15% of the best available techniques (the PPM family of statistical compressors), whilst being around twice as fast at compression and six times faster at decompression.
name: bzip2
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/bzip2@1.0.8-9.oe2403sp1?arch=x86_64&epoch=0&upstream=bzip2-1.0.8-9.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd216
type: software_Package
supplied by: SPDXRef-gnrtd220
software download location: NOASSERTION
summary: GCC OpenMP v4.5 shared support library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed for OpenMP v4.5 support.
name: libgomp
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/libgomp@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd882
type: software_Package
supplied by: SPDXRef-gnrtd947
software download location: NOASSERTION
summary: FreeType is a freely available software library to render fonts
software package version: 0:2.13.2-3.oe2403sp1
software home page: https://www.freetype.org
description: FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats
name: freetype
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/freetype@2.13.2-3.oe2403sp1?arch=x86_64&epoch=0&upstream=freetype-2.13.2-3.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd911
type: software_Package
supplied by: SPDXRef-gnrtd916
software download location: NOASSERTION
summary: A library of functions for manipulating PNG image format files
software package version: 2:1.6.40-12.oe2403sp1
software home page: http://www.libpng.org/pub/png/libpng.html
description: The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems.
name: libpng
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/libpng@1.6.40-12.oe2403sp1?arch=x86_64&epoch=2&upstream=libpng-1.6.40-12.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13
type: software_Package
supplied by: SPDXRef-gnrtd158
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp1
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-101.oe2403sp1?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd176
type: software_Package
supplied by: SPDXRef-gnrtd180
software download location: NOASSERTION
summary: Libraries for xz
software package version: 0:5.4.7-5.oe2403sp1
software home page: http://tukaani.org/xz
description: Libraries for decoding files compressed with LZMA or XZ utils.
name: xz-libs
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/xz-libs@5.4.7-5.oe2403sp1?arch=x86_64&epoch=0&upstream=xz-5.4.7-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd925
type: software_Package
supplied by: SPDXRef-gnrtd932
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-10.oe2403sp1
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=x86_64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110
type: software_Package
supplied by: SPDXRef-gnrtd114
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp1
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd69
type: software_Package
supplied by: SPDXRef-gnrtd74
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/libstdc++@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd900
type: software_Package
supplied by: SPDXRef-gnrtd920
software download location: NOASSERTION
summary: A 2D graphics library
software package version: 0:1.18.0-2.oe2403sp1
software home page: http://cairographics.org
description: Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME.
name: cairo
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/cairo@1.18.0-2.oe2403sp1?arch=x86_64&epoch=0&upstream=cairo-1.18.0-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd952
type: software_Package
supplied by: SPDXRef-gnrtd955
software download location: NOASSERTION
summary: Color Management Engine
software package version: 0:2.16-2.oe2403sp1
software home page: https://www.littlecms.com
description: LittleCMS intends to be an OPEN SOURSE small-footprint color management engine,with special focus on accuracy and performence.It uses the International Color Consortium standard (ICC), which is the modern standard when regarding to color management. The ICC specification is widely used and is referred to in many International and other de-facto standards.
name: lcms2
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/lcms2@2.16-2.oe2403sp1?arch=x86_64&epoch=0&upstream=lcms2-2.16-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1037
type: software_Package
supplied by: SPDXRef-gnrtd1043
software download location: NOASSERTION
summary: Libraries for OpenEXR
software package version: 0:3.1.11-4.oe2403sp1
software home page: http://www.openexr.com/
description: Libraries for OpenEXR.
name: OpenEXR-libs
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/OpenEXR-libs@3.1.11-4.oe2403sp1?arch=x86_64&epoch=0&upstream=OpenEXR-3.1.11-4.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd318
type: software_Package
supplied by: SPDXRef-gnrtd323
software download location: NOASSERTION
summary: Library providing XML and HTML support
software package version: 0:2.11.9-12.oe2403sp1
software home page: http://xmlsoft.org/
description: This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
name: libxml2
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/libxml2@2.11.9-12.oe2403sp1?arch=x86_64&epoch=0&upstream=libxml2-2.11.9-12.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd885
type: software_Package
supplied by: SPDXRef-gnrtd938
software download location: NOASSERTION
summary: A text shaping engine
software package version: 0:8.3.0-2.oe2403sp1
software home page: https://harfbuzz.github.io/
description: HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.
name: harfbuzz
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/harfbuzz@8.3.0-2.oe2403sp1?arch=x86_64&epoch=0&upstream=harfbuzz-8.3.0-2.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd62
type: software_Package
supplied by: SPDXRef-gnrtd65
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-64.oe2403sp1
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/libgcc@12.3.1-64.oe2403sp1?arch=x86_64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd961
type: software_Package
supplied by: SPDXRef-gnrtd968
software download location: NOASSERTION
summary: TIFF Library and Utilities
software package version: 0:4.6.0-10.oe2403sp1
software home page: https://libtiff.gitlab.io/libtiff/
description: This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
name: libtiff
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/libtiff@4.6.0-10.oe2403sp1?arch=x86_64&epoch=0&upstream=libtiff-4.6.0-10.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1343
type: software_Package
supplied by: SPDXRef-gnrtd1367
software download location: NOASSERTION
summary: Create, edit, compose, or convert bitmap images
software package version: 1:7.1.2.2-1.oe2403sp1
software home page: http://www.imagemagick.org/
description: Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.
name: ImageMagick
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/ImageMagick@7.1.2.2-1.oe2403sp1?arch=x86_64&epoch=1&upstream=ImageMagick-7.1.2.2-1.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1144
type: software_Package
supplied by: SPDXRef-gnrtd1148
software download location: NOASSERTION
summary: C-Library for JPEG 2000
software package version: 0:2.5.0-6.oe2403sp1
software home page: https://github.com/uclouvain/openjpeg
description: OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software.
name: openjpeg2
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/openjpeg2@2.5.0-6.oe2403sp1?arch=x86_64&epoch=0&upstream=openjpeg2-2.5.0-6.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1067
type: software_Package
supplied by: SPDXRef-gnrtd1170
software download location: NOASSERTION
summary: An interpreter for PostScript and PDF files
software package version: 0:9.56.1-15.oe2403sp1
software home page: https://ghostscript.com/
description: Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
name: ghostscript
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/ghostscript@9.56.1-15.oe2403sp1?arch=x86_64&epoch=0&upstream=ghostscript-9.56.1-15.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd903
type: software_Package
supplied by: SPDXRef-gnrtd906
software download location: NOASSERTION
summary: Core X11 protocol client library
software package version: 0:1.8.7-3.oe2403sp1
software home page: http://www.x.org
description: Core X11 protocol client library.
name: libX11
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/libX11@1.8.7-3.oe2403sp1?arch=x86_64&epoch=0&upstream=libX11-1.8.7-3.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd27
type: software_Package
supplied by: SPDXRef-gnrtd141
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-17.oe2403sp1
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-17.oe2403sp1?arch=x86_64&epoch=0&upstream=coreutils-9.4-17.oe2403sp1.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0