type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-15T18:06:43Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-15T18:06:43Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP3/update/x86_64-d52c7169-4cd1-491a-9531-33e58c17a04f-specv3/SPDXRef-gnrtd3776
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd212
from: xz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3368
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd3369
from: gdb-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd331
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd332
from: gawk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd43
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd44
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd66
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd67
from: sed
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd569
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd570
from: diffutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19703
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd524
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd116
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd117
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3785
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd3786
from: gzip
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd274
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd275
from: bzip2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3788
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd3789
from: gzip
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3798
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd3799
from: tar
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd529
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd524
from: rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd91
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd92
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd526
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd524
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd74
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd75
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd328
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd329
from: gawk
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3795
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd3796
from: tar
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13984
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd13985
from: patch
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd77
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd75
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3774
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd212
from: xz
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd523
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd524
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13981
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd13982
from: patch
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd211
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd212
from: xz-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd572
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd573
from: diffutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd47
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19705
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd524
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd95
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd63
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd64
from: sed
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd527
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd524
from: rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3365
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd3366
from: gdb-headless
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd277
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd275
from: bzip2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd138
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd139
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd135
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd136
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd214
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd212
from: xz-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd119
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd120
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd58
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd59
from: libacl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd62
from: libacl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19697
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xz
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19701
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19691
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-libs
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19695
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tar
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19687
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: patch
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19698
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19686
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19699
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xz-libs
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19702
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libacl
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19692
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: diffutils
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19688
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bzip2
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19693
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: sed
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19689
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19696
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gdb-headless
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19700
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gzip
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19685
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcap
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19694
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gawk
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19690
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd64
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd95
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd136
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3366
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and LGPLv3+ and BSD and Public Domain and GFDL-1.3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd332
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv2+ and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd44
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13982
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd275
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-4-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd59
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd117
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd92
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd75
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd67
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3786
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd212
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-3.0-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd573
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3796
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd139
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd62
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd329
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv2+ and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3789
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13985
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3799
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd524
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3369
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and LGPLv3+ and BSD and Public Domain and GFDL-1.3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd120
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd570
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd65
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd93
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd528
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd76
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3367
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3797
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd276
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19704
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13983
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd571
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd330
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd213
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd118
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd137
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3787
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd525
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3775
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd209
type: software_Package
supplied by: SPDXRef-gnrtd213
software download location: NOASSERTION
summary: Libraries for xz
software package version: 0:5.4.7-8.oe2403sp3
software home page: http://tukaani.org/xz
description: Libraries for decoding files compressed with LZMA or XZ utils.
name: xz-libs
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/xz-libs@5.4.7-8.oe2403sp3?arch=x86_64&epoch=0&upstream=xz-5.4.7-8.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16
type: software_Package
supplied by: SPDXRef-gnrtd137
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-101.oe2403sp3
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-101.oe2403sp3?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd52
type: software_Package
supplied by: SPDXRef-gnrtd65
software download location: NOASSERTION
summary: non-interactive command-line text editor
software package version: 0:4.9-5.oe2403sp3
software home page: https://www.gnu.org/software/sed/
description: Sed is a non-interactive command-line text editor. A stream editor is used to per-form basic text transformations on an input stream (a file or input from a pipeline).
name: sed
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/sed@4.9-5.oe2403sp3?arch=x86_64&epoch=0&upstream=sed-4.9-5.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19684
type: software_Package
supplied by: SPDXRef-gnrtd19704
software download location: NOASSERTION
summary: Scripts and executable programs used to build packages
software package version: 0:4.18.2-34.oe2403sp3
software home page: https://rpm.org/
description: This package provides scripts and executable programs that used to build rpm packages.
name: rpm-build
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/rpm-build@4.18.2-34.oe2403sp3?arch=x86_64&epoch=0&upstream=rpm-4.18.2-34.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd325
type: software_Package
supplied by: SPDXRef-gnrtd330
software download location: NOASSERTION
summary: The GNU version of the AWK text processing utility
software package version: 0:5.2.2-3.oe2403sp3
software home page: https://www.gnu.org/software/gawk/
description: The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code.
name: gawk
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/gawk@5.2.2-3.oe2403sp3?arch=x86_64&epoch=0&upstream=gawk-5.2.2-3.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3782
type: software_Package
supplied by: SPDXRef-gnrtd3787
software download location: NOASSERTION
summary: A data compression utility
software package version: 0:1.12-7.oe2403sp3
software home page: https://www.gnu.org/software/gzip
description: gzip is a single-file/stream lossless data compression utility, where the resulting compressed file generally has the suffix .gz.
name: gzip
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/gzip@1.12-7.oe2403sp3?arch=x86_64&epoch=0&upstream=gzip-1.12-7.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd567
type: software_Package
supplied by: SPDXRef-gnrtd571
software download location: NOASSERTION
summary: A GNU collection of diff utilities
software package version: 0:3.10-3.oe2403sp3
software home page: http://www.gnu.org/software/diffutils/diffutils.html
description: GNU Diffutils is a package of several programs related to finding differences between files.
name: diffutils
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/diffutils@3.10-3.oe2403sp3?arch=x86_64&epoch=0&upstream=diffutils-3.10-3.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd271
type: software_Package
supplied by: SPDXRef-gnrtd276
software download location: NOASSERTION
summary: A high-quality data compressor
software package version: 0:1.0.8-9.oe2403sp3
software home page: https://www.sourceware.org/bzip2/
description: bzip2 is a freely available, patent free, high-quality data compressor. It typically compresses files to within 10% to 15% of the best available techniques (the PPM family of statistical compressors), whilst being around twice as fast at compression and six times faster at decompression.
name: bzip2
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/bzip2@1.0.8-9.oe2403sp3?arch=x86_64&epoch=0&upstream=bzip2-1.0.8-9.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: software_Package
supplied by: SPDXRef-gnrtd528
software download location: NOASSERTION
summary: RPM Package Manager
software package version: 0:4.18.2-34.oe2403sp3
software home page: https://rpm.org/
description: The RPM Package Manager (RPM) is a powerful package management system capability as below -building computer software from source into easily distributable packages -installing, updating and uninstalling packaged software -querying detailed information about the packaged software, whether installed or not -verifying integrity of packaged software and resulting software installation
name: rpm
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/rpm@4.18.2-34.oe2403sp3?arch=x86_64&epoch=0&upstream=rpm-4.18.2-34.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd41
type: software_Package
supplied by: SPDXRef-gnrtd45
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp3
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403sp3?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd514
type: software_Package
supplied by: SPDXRef-gnrtd525
software download location: NOASSERTION
summary: Shared library of rpm 4.18
software package version: 0:4.18.2-34.oe2403sp3
software home page: https://rpm.org/
description: Shared library of rpm 4.18.
name: rpm-libs
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/rpm-libs@4.18.2-34.oe2403sp3?arch=x86_64&epoch=0&upstream=rpm-4.18.2-34.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3791
type: software_Package
supplied by: SPDXRef-gnrtd3797
software download location: NOASSERTION
summary: An organized and systematic method of controlling a large amount of data
software package version: 2:1.35-3.oe2403sp3
software home page: http://www.gnu.org/software/tar/
description: GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored.
name: tar
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/tar@1.35-3.oe2403sp3?arch=x86_64&epoch=2&upstream=tar-1.35-3.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39
type: software_Package
supplied by: SPDXRef-gnrtd76
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.0.12-32.oe2403sp3
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/openssl-libs@3.0.12-32.oe2403sp3?arch=x86_64&epoch=1&upstream=openssl-3.0.12-32.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd55
type: software_Package
supplied by: SPDXRef-gnrtd60
software download location: NOASSERTION
summary: Library for supporting access control list
software package version: 0:2.3.1-7.oe2403sp3
software home page: https://savannah.nongnu.org/projects/acl
description: This package contains the library for manipulating access control list.
name: libacl
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/libacl@2.3.1-7.oe2403sp3?arch=x86_64&epoch=0&upstream=acl-2.3.1-7.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd79
type: software_Package
supplied by: SPDXRef-gnrtd93
software download location: NOASSERTION
summary: A library for getting and setting POSIX.1e draft 15 capabilities
software package version: 0:2.69-7.oe2403sp3
software home page: https://sites.google.com/site/fullycapable
description: This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
name: libcap
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/libcap@2.69-7.oe2403sp3?arch=x86_64&epoch=0&upstream=libcap-2.69-7.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd28
type: software_Package
supplied by: SPDXRef-gnrtd118
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-23.oe2403sp3
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-23.oe2403sp3?arch=x86_64&epoch=0&upstream=coreutils-9.4-23.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3349
type: software_Package
supplied by: SPDXRef-gnrtd3367
software download location: NOASSERTION
summary: The GNU Project debugger for C, C++, Fortran, Go and other languages
software package version: 0:14.1-13.oe2403sp3
software home page: http://gnu.org/software/gdb/
description: GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.
name: gdb-headless
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/gdb-headless@14.1-13.oe2403sp3?arch=x86_64&epoch=0&upstream=gdb-14.1-13.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd13978
type: software_Package
supplied by: SPDXRef-gnrtd13983
software download location: NOASSERTION
summary: Utiliity which applies a patch file to original files.
software package version: 0:2.7.6-23.oe2403sp3
software home page: http://www.gnu.org/software/patch/patch.html
description: Patch takes a patch file containing a difference listing produced by the diff program and applies those differences to one or more original files, producing patched versions.
name: patch
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/patch@2.7.6-23.oe2403sp3?arch=x86_64&epoch=0&upstream=patch-2.7.6-23.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3770
type: software_Package
supplied by: SPDXRef-gnrtd3775
software download location: NOASSERTION
summary: A free general-purpose data compreession software with LZMA2 algorithm
software package version: 0:5.4.7-8.oe2403sp3
software home page: http://tukaani.org/xz
description: XZ Utils is free general-purpose data compression software with a high compression ratio. XZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils. The core of the XZ Utils compression code is based on LZMA SDK, but it has been modified quite a lot to be suitable for XZ Utils. The primary compression algorithm is currently LZMA2, which is used inside the .xz container format. With typical files, XZ Utils create 30% smaller output than gzip and 15% smaller output than bzip2.
name: xz
software source info: acquired package info from repodata DB: repodata/20e3d701abe6153959c07e23f649a942315c0a527c927d709ed6ce10bdf6aed0-primary.sqlite.bz2
software package url: pkg:rpm/xz@5.4.7-8.oe2403sp3?arch=x86_64&epoch=0&upstream=xz-5.4.7-8.oe2403sp3.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0