type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd2282
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2283
from: dbus-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd268
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd269
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1417
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1418
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84499
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd84500
from: rpmdevtools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd60
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd61
from: libblkid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1629
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1627
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1041
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1039
from: bzip2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2285
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2286
from: dbus-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2259
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2260
from: libgcrypt
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd547
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8193
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd129
from: libyaml
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6653
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd129
from: xmlsec1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd397
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd398
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1495
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd129
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd236
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84526
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd84527
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd400
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd401
from: libcap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1493
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd129
from: libxml2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84502
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd84503
from: rpmdevtools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18198
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1627
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd168
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd169
from: libacl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2262
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2263
from: libgcrypt
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6641
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd129
from: libxslt
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd239
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5317
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5318
from: GConf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd549
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd550
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40478
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: python3-docker
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd141
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd142
from: pcre2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1626
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1627
from: rpm-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd510
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd511
from: libselinux
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18196
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1627
from: rpm-build
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd165
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd166
from: libacl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd265
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd266
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd144
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd145
from: pcre2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd63
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd64
from: libblkid
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84523
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd84524
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5314
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5315
from: GConf2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6643
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd129
from: libxslt
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8191
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd129
from: libyaml
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1420
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1418
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd513
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd514
from: libselinux
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6651
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd129
from: xmlsec1
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1038
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1039
from: bzip2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40476
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: python3-docker
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84517
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libacl
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84513
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bzip2
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84507
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-build
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84481
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpmdevtools
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84509
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: rpm-libs
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84516
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: pcre2
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84520
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libyaml
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84512
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxml2
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84521
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84508
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcap
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84519
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: dbus-libs
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84504
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgcrypt
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84515
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84506
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libblkid
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84511
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: GConf2
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84514
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxslt
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84518
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: python3-docker
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84522
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84480
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcurl
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84510
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libselinux
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84505
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xmlsec1
from: openscap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd547
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd142
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd166
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd61
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1627
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84524
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd64
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2263
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd511
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd550
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2286
type: simplelicensing_LicenseExpression
simplelicensing license expression: AFLv3.0 or GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd398
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5318
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84527
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2260
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84500
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd169
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1418
type: simplelicensing_LicenseExpression
simplelicensing license expression: curl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd129
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd266
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd514
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5315
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd401
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd145
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2283
type: simplelicensing_LicenseExpression
simplelicensing license expression: AFLv3.0 or GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84503
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and GPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd237
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd269
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1039
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-4-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40477
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd143
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1040
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd238
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1628
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1494
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2284
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84525
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd62
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18197
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6652
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd548
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2261
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84501
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6642
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd267
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd512
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1419
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5316
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8192
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd399
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd167
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1034
type: software_Package
supplied by: SPDXRef-gnrtd1040
software download location: NOASSERTION
summary: A high-quality data compressor
software package version: 0:1.0.8-9.oe2403sp4
software home page: https://www.sourceware.org/bzip2/
description: bzip2 is a freely available, patent free, high-quality data compressor. It typically compresses files to within 10% to 15% of the best available techniques (the PPM family of statistical compressors), whilst being around twice as fast at compression and six times faster at decompression.
name: bzip2
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bzip2@1.0.8-9.oe2403sp4?arch=x86_64&epoch=0&upstream=bzip2-1.0.8-9.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1562
type: software_Package
supplied by: SPDXRef-gnrtd1628
software download location: NOASSERTION
summary: Shared library of rpm 4.18
software package version: 0:4.18.2-34.oe2403sp4
software home page: https://rpm.org/
description: Shared library of rpm 4.18.
name: rpm-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/rpm-libs@4.18.2-34.oe2403sp4?arch=x86_64&epoch=0&upstream=rpm-4.18.2-34.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd155
type: software_Package
supplied by: SPDXRef-gnrtd167
software download location: NOASSERTION
summary: Library for supporting access control list
software package version: 0:2.3.1-6.oe2403sp4
software home page: https://savannah.nongnu.org/projects/acl
description: This package contains the library for manipulating access control list.
name: libacl
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libacl@2.3.1-6.oe2403sp4?arch=x86_64&epoch=0&upstream=acl-2.3.1-6.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5271
type: software_Package
supplied by: SPDXRef-gnrtd5316
software download location: NOASSERTION
summary: GConf is a system for storing application preferences
software package version: 0:3.2.6-28.oe2403sp4
software home page: http://projects.gnome.org/gconf/
description: The root motivation for GConf is to make application preferences more manageable for system administrators. The initial GConf implementation has some shortcomings in this area; however, the client-side API should be correct, and the initial implementation is a decent first cut GConf involves a few new concepts, but no rocket science. Essentially GConf provides a preferences database, which is like a simple filesystem
name: GConf2
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/GConf2@3.2.6-28.oe2403sp4?arch=x86_64&epoch=0&upstream=GConf2-3.2.6-28.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15
type: software_Package
supplied by: SPDXRef-gnrtd512
software download location: NOASSERTION
summary: SELinux library and simple utilities
software package version: 0:3.5-9.oe2403sp4
software home page: https://github.com/SELinuxProject/selinux/wiki
description: libselinux provides an interface to get and set process and file security contexts and to obtain security policy decisions.
name: libselinux
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libselinux@3.5-9.oe2403sp4?arch=x86_64&epoch=0&upstream=libselinux-3.5-9.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd548
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1484
type: software_Package
supplied by: SPDXRef-gnrtd1494
software download location: NOASSERTION
summary: Library providing XML and HTML support
software package version: 0:2.11.9-13.oe2403sp4
software home page: http://xmlsoft.org/
description: This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
name: libxml2
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libxml2@2.11.9-13.oe2403sp4?arch=x86_64&epoch=0&upstream=libxml2-2.11.9-13.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd246
type: software_Package
supplied by: SPDXRef-gnrtd267
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-16.oe2403sp4
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=x86_64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6634
type: software_Package
supplied by: SPDXRef-gnrtd6642
software download location: NOASSERTION
summary: XSLT Transformation Library
software package version: 0:1.1.39-7.oe2403sp4
software home page: https://gitlab.gnome.org/GNOME/libxslt
description: Libxslt is the XSLT C library developed for the GNOME project
name: libxslt
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libxslt@1.1.39-7.oe2403sp4?arch=x86_64&epoch=0&upstream=libxslt-1.1.39-7.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2279
type: software_Package
supplied by: SPDXRef-gnrtd2284
software download location: NOASSERTION
summary: Libraries for D-BUS
software package version: 1:1.14.8-3.oe2403sp4
software home page: http://www.freedesktop.org/Software/dbus/
description: This package contains libraries for D-BUS.
name: dbus-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/dbus-libs@1.14.8-3.oe2403sp4?arch=x86_64&epoch=1&upstream=dbus-1.14.8-3.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd40443
type: software_Package
supplied by: SPDXRef-gnrtd40477
software download location: NOASSERTION
summary: A Python library for the Docker Engine API.
software package version: 0:7.0.0-2.oe2403sp4
software home page: https://github.com/docker/docker-py
description: A Python library for the Docker Engine API.
name: python3-docker
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd33
type: software_Package
supplied by: SPDXRef-gnrtd399
software download location: NOASSERTION
summary: A library for getting and setting POSIX.1e draft 15 capabilities
software package version: 0:2.69-7.oe2403sp4
software home page: https://sites.google.com/site/fullycapable
description: This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.
name: libcap
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libcap@2.69-7.oe2403sp4?arch=x86_64&epoch=0&upstream=libcap-2.69-7.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd6632
type: software_Package
supplied by: SPDXRef-gnrtd6652
software download location: NOASSERTION
summary: Library providing support for "XML Signature" and "XML Encryption" standards
software package version: 0:1.2.42-2.oe2403sp4
software home page: https://www.aleksey.com/xmlsec
description: XML Security Library is a C library based on LibXML2 and OpenSSL. The library was created with a goal to support major XML security standards "XML Digital Signature" and "XML Encryption".
name: xmlsec1
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/xmlsec1@1.2.42-2.oe2403sp4?arch=x86_64&epoch=0&upstream=xmlsec1-1.2.42-2.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84479
type: software_Package
supplied by: SPDXRef-gnrtd84525
software download location: NOASSERTION
summary: An open source framework in order to provide a interface for using scap
software package version: 0:1.3.9-4.oe2403sp4
software home page: http://www.open-scap.org
description: Openscap is an open source framework that integrates secure content automation protocols. Its goal is to provide a simple and easy to use interface for using scap.
name: openscap
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/openscap@1.3.9-4.oe2403sp4?arch=x86_64&epoch=0&upstream=openscap-1.3.9-4.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2249
type: software_Package
supplied by: SPDXRef-gnrtd2261
software download location: NOASSERTION
summary: A general-purpose cryptography library
software package version: 0:1.10.2-4.oe2403sp4
software home page: https://www.gnupg.org/
description: Libgcrypt is a general purpose cryptographic library originally based on code from GnuPG.
name: libgcrypt
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libgcrypt@1.10.2-4.oe2403sp4?arch=x86_64&epoch=0&upstream=libgcrypt-1.10.2-4.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8189
type: software_Package
supplied by: SPDXRef-gnrtd8192
software download location: NOASSERTION
summary: A C library for parsing and emitting YAML
software package version: 0:0.2.5-7.oe2403sp4
software home page: https://github.com/yaml/libyaml
description: YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C.
name: libyaml
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libyaml@0.2.5-7.oe2403sp4?arch=x86_64&epoch=0&upstream=libyaml-0.2.5-7.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd84482
type: software_Package
supplied by: SPDXRef-gnrtd84501
software download location: NOASSERTION
summary: RPM Development Tools
software package version: 0:9.6-3.oe2403sp4
software home page: https://pagure.io/rpmdevtools
description: rpmdevtools contains many scripts to aid in package development. rpmdevtools when installed also pulls in (roughly) the explicit minimum build environment as defined in packaging guidelines, and contains (X)Emacs helpers that integrates rpm-spec-mode.el with rpmdev-newspec.
name: rpmdevtools
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd18129
type: software_Package
supplied by: SPDXRef-gnrtd18197
software download location: NOASSERTION
summary: Scripts and executable programs used to build packages
software package version: 0:4.18.2-34.oe2403sp4
software home page: https://rpm.org/
description: This package provides scripts and executable programs that used to build rpm packages.
name: rpm-build
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/rpm-build@4.18.2-34.oe2403sp4?arch=x86_64&epoch=0&upstream=rpm-4.18.2-34.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1337
type: software_Package
supplied by: SPDXRef-gnrtd1419
software download location: NOASSERTION
summary: A library for getting files from web servers
software package version: 0:8.4.0-30.oe2403sp4
software home page: https://curl.se/
description: A library for getting files from web servers.
name: libcurl
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libcurl@8.4.0-30.oe2403sp4?arch=x86_64&epoch=0&upstream=curl-8.4.0-30.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd119
type: software_Package
supplied by: SPDXRef-gnrtd143
software download location: NOASSERTION
summary: Perl Compatible Regular Expressions
software package version: 0:10.42-14.oe2403sp4
software home page: http://www.pcre.org/
description: PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Since its initial release in 2015, there has been further development of the code and it now differs from PCRE1 in more than just the API. PCRE2 is written in C, and it has its own API. There are three sets of functions, one for the 8-bit library, which processes strings of bytes, one for the 16-bit library, which processes strings of 16-bit values, and one for the 32-bit library, which processes strings of 32-bit values. Unlike PCRE1, there are no C++ wrappers. The distribution does contain a set of C wrapper functions for the 8-bit library that are based on the POSIX regular expression API (see the pcre2posix man page). These are built into a library called libpcre2-posix. Note that this just provides a POSIX calling interface to PCRE2; the regular expressions themselves still follow Perl syntax and semantics. The POSIX API is restricted, and does not give full access to all of PCRE2's facilities.
name: pcre2
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/pcre2@10.42-14.oe2403sp4?arch=x86_64&epoch=0&upstream=pcre2-10.42-14.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110
type: software_Package
supplied by: SPDXRef-gnrtd238
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.5.6-4.oe2403sp4
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/openssl-libs@3.5.6-4.oe2403sp4?arch=x86_64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd48
type: software_Package
supplied by: SPDXRef-gnrtd62
software download location: NOASSERTION
summary: Library for block device id.
software package version: 0:2.39.1-38.oe2403sp4
software home page: https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git
description: This package is le library for block device id.
name: libblkid
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libblkid@2.39.1-38.oe2403sp4?arch=x86_64&epoch=0&upstream=util-linux-2.39.1-38.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1