type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T04:28:12Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T04:28:12Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/aarch64-074b704b-0eaf-4bcb-89c3-8ea4fa68b0fd-specv3/SPDXRef-gnrtd2689
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2690
from: lksctp-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd45
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd46
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd640
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd641
from: nss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd503
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd635
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd636
from: nss-softokn
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd247
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd248
from: ca-certificates
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2678
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd261
from: cups-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd244
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd245
from: ca-certificates
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2828
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2829
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2442
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2443
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd539
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd540
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd632
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd633
from: nss-softokn
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd39
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd40
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2757
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2755
from: chkconfig
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd500
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2686
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2687
from: lksctp-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2831
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2832
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd161
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd162
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2722
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2723
from: copy-jdk-configs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd164
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd165
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd637
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd638
from: nss
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2725
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2726
from: copy-jdk-configs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd49
from: libstdc++
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2676
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd261
from: cups-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd37
from: libgcc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2693
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2695
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd546
from: javapackages-filesystem
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2439
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2440
from: freetype
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2754
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2755
from: chkconfig
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd542
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd543
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2824
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: lksctp-tools
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2825
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: nss
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2815
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2822
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: freetype
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2821
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: cups-libs
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2814
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: copy-jdk-configs
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2827
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libstdc++
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2818
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: nss-softokn
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2826
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcc
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2820
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: javapackages-filesystem
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2816
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: ca-certificates
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2817
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: chkconfig
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2823
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2819
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: java-1.8.0-openjdk-headless-slowdebug
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd261
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2690
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2 and GPLv2+ and LGPLv2 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd540
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd543
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd503
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd245
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2687
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2 and GPLv2+ and LGPLv2 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2832
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-3-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2829
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2726
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2440
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND (FTL OR GPL-2.0-or-later) AND MIT-Modern-Variant AND Zlib)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd641
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd633
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd162
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd248
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2755
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-2.0-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2723
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd638
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd636
type: simplelicensing_LicenseExpression
simplelicensing license expression: MPLv2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2443
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND MIT AND MIT-Modern-Variant AND (FTL OR GPL-2.0-or-later) AND Zlib)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd165
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd49
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd38
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2694
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2830
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd246
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd541
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd47
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2677
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2688
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2756
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2724
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd634
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2441
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd163
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd639
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2692
type: software_Package
supplied by: SPDXRef-gnrtd2694
software download location: NOASSERTION
summary: Filesystem layout for java packages
software package version: 0:5.3.0-6.oe2403sp4
software home page: https://github.com/fedora-java/javapackages
description: The javapackages-filesystem package contains some basic directories into which Java packages install their content.
name: javapackages-filesystem
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2698
type: software_Package
supplied by: SPDXRef-gnrtd2724
software download location: NOASSERTION
summary: JDKs Configuration File
software package version: 0:4.1-1.oe2403sp4
software home page: https://github.com/rh-openjdk/copy_jdk_configs
description: Utility script for transferring JDK configuration files when updating or archiving. Repair rpmnew file created by error by using scrip
name: copy-jdk-configs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd35
type: software_Package
supplied by: SPDXRef-gnrtd38
software download location: NOASSERTION
summary: GCC version 12 shared support library
software package version: 0:12.3.1-110.oe2403sp4
software home page: https://gcc.gnu.org
description: This package contains GCC shared support library which is needed e.g. for exception handling support.
name: libgcc
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2731
type: software_Package
supplied by: SPDXRef-gnrtd2756
software download location: NOASSERTION
summary: A system tool for maintaining the /etc/rc*.d hierarchy
software package version: 0:1.25-3.oe2403sp4
software home page: https://github.com/fedora-sysv/chkconfig
description: Chkconfig is a basic system utility. It updates and queries runlevel information for system services. Chkconfig manipulates the numerous symbolic links in /etc/rc.d, to relieve system administrators of some of the drudgery of manually editing the symbolic links.
name: chkconfig
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd541
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2633
type: software_Package
supplied by: SPDXRef-gnrtd2677
software download location: NOASSERTION
summary: CUPS libs
software package version: 1:2.4.7-16.oe2403sp4
software home page: https://openprinting.github.io/cups/
description: CUPS printing system provides a portable printing layer for UNIX® operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces. The cups-libs package provides libraries used by applications to use CUPS natively, without needing the lp/lpr commands.
name: cups-libs
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd608
type: software_Package
supplied by: SPDXRef-gnrtd634
software download location: NOASSERTION
summary: Network Security Services Softoken and Freebl library Module
software package version: 0:3.94.0-9.oe2403sp4
software home page: http://www.mozilla.org/projects/security/pki/nss/
description: Network Security Services Softoken and Freebl Cryptographic Module
name: nss-softokn
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd42
type: software_Package
supplied by: SPDXRef-gnrtd47
software download location: NOASSERTION
summary: GNU Standard C++ Library
software package version: 0:12.3.1-110.oe2403sp4
software home page: https://gcc.gnu.org
description: The libstdc++ package contains a rewritten standard compliant GCC Standard C++ Library.
name: libstdc++
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2682
type: software_Package
supplied by: SPDXRef-gnrtd2688
software download location: NOASSERTION
summary: Linux Kernel Stream Control Transmission Protocol Tools
software package version: 0:1.0.19-3.oe2403sp4
software home page: http://lksctp.sourceforge.net
description: The lksctp-tools project provides a Linux user space library for SCTP (libsctp) including C language header files (netinet/sctp.h) for accessing SCTP specific application programming interfaces not provided by the standard sockets, and also some helper utilities around SCTP. For more information on the features and functions currently supported by lksctp, please refer to the documentation in the Linux kernel resp. in the lksctp-tools package. The lksctp-tools source contains a set of test programs which would also serve as example applications.
name: lksctp-tools
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29
type: software_Package
supplied by: SPDXRef-gnrtd501
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd77
type: software_Package
supplied by: SPDXRef-gnrtd246
software download location: NOASSERTION
summary: The Mozilla CA root certificate bundle
software package version: 0:2023.2.64-6.oe2403sp4
software home page: https://fedoraproject.org/wiki/CA-Certificates
description: This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI.
name: ca-certificates
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2424
type: software_Package
supplied by: SPDXRef-gnrtd2441
software download location: NOASSERTION
summary: FreeType is a freely available software library to render fonts
software package version: 0:2.13.2-5.oe2403sp4
software home page: https://www.freetype.org
description: FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats
name: freetype
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2813
type: software_Package
supplied by: SPDXRef-gnrtd2830
name: java-1.8.0-openjdk-headless-slowdebug
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
software download location: NOASSERTION
summary: OpenJDK Runtime Environment 8 with full debug on
software package version: 1:1.8.0.492.b09-5.oe2403sp4
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support. This package has full debug on. Install only in need and remove asap.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd80
type: software_Package
supplied by: SPDXRef-gnrtd163
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd578
type: software_Package
supplied by: SPDXRef-gnrtd639
software download location: NOASSERTION
summary: Network Security Services
software package version: 0:3.94.0-9.oe2403sp4
software home page: http://www.mozilla.org/projects/security/pki/nss/
description: Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.
name: nss
software source info: acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0