type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd8703
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd8704
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd498
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd499
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd392
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd393
from: pam
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2269
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2270
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd356
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd357
from: libxcrypt
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2349
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2350
from: systemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd372
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd373
from: audit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd502
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd311
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd129
from: krb5-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd439
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd440
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd547
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8700
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd8701
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd236
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd177
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd178
from: crypto-policies
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd395
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd396
from: pam
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd359
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd360
from: libxcrypt
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd375
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd376
from: audit-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd189
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd190
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd186
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd187
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8708
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd8709
from: openssh
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd93
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd94
from: e2fsprogs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd239
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd180
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd181
from: crypto-policies
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd442
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd443
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd549
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd550
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2346
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2347
from: systemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd510
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd511
from: libselinux
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2235
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2236
from: shadow
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd309
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd129
from: krb5-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2238
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2239
from: shadow
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd513
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd514
from: libselinux
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8711
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd8712
from: openssh
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2272
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2273
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd90
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd91
from: e2fsprogs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8699
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: pam
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8687
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8689
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8697
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8686
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: crypto-policies
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8691
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssh
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8685
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: krb5-libs
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8695
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8690
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libxcrypt
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8696
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8694
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: shadow
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8688
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: e2fsprogs
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8684
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8692
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libselinux
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8693
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8698
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: audit-libs
from: openssh-server
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd547
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd190
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2273
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd443
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd511
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd373
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd550
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd94
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd393
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd357
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2236
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2347
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd396
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd187
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd360
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd91
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2 and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd129
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8704
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2270
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd440
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd376
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd181
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8701
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8709
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd514
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8712
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2239
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2350
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd178
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd237
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8702
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd374
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd238
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd394
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd92
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd179
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd188
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd548
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2271
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd310
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2237
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd512
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2348
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8710
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd358
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd46
type: software_Package
supplied by: SPDXRef-gnrtd92
software download location: NOASSERTION
summary: Second extended file system management tools
software package version: 0:1.47.0-12.oe2403sp4
software home page: http://e2fsprogs.sourceforge.net/
description: The e2fsprogs package consists of a lot of tools for users to create, check, modify, and correct any inconsistencies in second extended file system.
name: e2fsprogs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/e2fsprogs@1.47.0-12.oe2403sp4?arch=x86_64&epoch=0&upstream=e2fsprogs-1.47.0-12.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd112
type: software_Package
supplied by: SPDXRef-gnrtd179
software download location: NOASSERTION
summary: Crypto policies package for Fedora
software package version: 0:20230614-4.git5f3458e.oe2403sp4
software home page: https://gitlab.com/redhat-crypto/fedora-crypto-policies
description: This package provides update-crypto-policies, which is a tool that sets the policy applicable for the various cryptographic back-ends, such as SSL/TLS libraries. The policy set by the tool will be the default policy used by these back-ends unless the application user configures them otherwise. https://fedoraproject.org/wiki/Changes/CryptoPolicy
name: crypto-policies
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2173
type: software_Package
supplied by: SPDXRef-gnrtd2348
software download location: NOASSERTION
summary: System and Service Manager
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: systemd is a system and service manager that runs as PID 1 and starts the rest of the system.
name: systemd
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/systemd@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15
type: software_Package
supplied by: SPDXRef-gnrtd512
software download location: NOASSERTION
summary: SELinux library and simple utilities
software package version: 0:3.5-9.oe2403sp4
software home page: https://github.com/SELinuxProject/selinux/wiki
description: libselinux provides an interface to get and set process and file security contexts and to obtain security policy decisions.
name: libselinux
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libselinux@3.5-9.oe2403sp4?arch=x86_64&epoch=0&upstream=libselinux-3.5-9.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd354
type: software_Package
supplied by: SPDXRef-gnrtd358
software download location: NOASSERTION
summary: Extended crypt library for DES, MD5, Blowfish and others
software package version: 0:4.4.36-3.oe2403sp4
software home page: https://github.com/besser82/libxcrypt
description: libxcrypt is a modern library for one-way hashing of passwords. It supports a wide variety of both modern and historical hashing methods: yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt, sha256crypt, md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt, and descrypt. It provides the traditional Unix crypt and crypt_r interfaces, as well as a set of extended interfaces pioneered by Openwall Linux, crypt_rn, crypt_ra, crypt_gensalt, crypt_gensalt_rn, and crypt_gensalt_ra. libxcrypt is intended to be used by login(1), passwd(1), and other similar programs; that is, to hash a small number of passwords during an interactive authentication dialogue with a human. It is not suitable for use in bulk password-cracking applications, or in any other situation where speed is more important than careful handling of sensitive data. However, it is intended to be fast and lightweight enough for use in servers that must field thousands of login attempts per minute.
name: libxcrypt
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libxcrypt@4.4.36-3.oe2403sp4?arch=x86_64&epoch=0&upstream=libxcrypt-4.4.36-3.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd548
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd362
type: software_Package
supplied by: SPDXRef-gnrtd374
software download location: NOASSERTION
summary: Dynamic library for libaudit
software package version: 1:3.1.2-14.oe2403sp4
software home page: https://people.redhat.com/sgrubb/audit/
description: The audit-libs package contains the dynamic libraries needed for applications to use the audit framework.
name: audit-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/audit-libs@3.1.2-14.oe2403sp4?arch=x86_64&epoch=1&upstream=audit-3.1.2-14.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2198
type: software_Package
supplied by: SPDXRef-gnrtd2237
software download location: NOASSERTION
summary: Tools for managing accounts and shadow password files
software package version: 2:4.14.3-8.oe2403sp4
software home page: http://pkg-shadow.alioth.debian.org/
description: This package includes the necessary programs for converting plain password files to the shadow password format and to manage user and group accounts.
name: shadow
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/shadow@4.14.3-8.oe2403sp4?arch=x86_64&epoch=2&upstream=shadow-4.14.3-8.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31
type: software_Package
supplied by: SPDXRef-gnrtd441
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2244
type: software_Package
supplied by: SPDXRef-gnrtd2271
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/systemd-libs@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21
type: software_Package
supplied by: SPDXRef-gnrtd500
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd38
type: software_Package
supplied by: SPDXRef-gnrtd394
software download location: NOASSERTION
summary: Pluggable Authentication Modules for Linux
software package version: 0:1.5.3-11.oe2403sp4
software home page: http://www.linux-pam.org/
description: PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.
name: pam
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/pam@1.5.3-11.oe2403sp4?arch=x86_64&epoch=0&upstream=pam-1.5.3-11.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd184
type: software_Package
supplied by: SPDXRef-gnrtd188
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp4
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8683
type: software_Package
supplied by: SPDXRef-gnrtd8702
software download location: NOASSERTION
summary: An open source SSH server daemon
software package version: 0:9.6p1-16.oe2403sp4
software home page: http://www.openssh.com/portable.html
description: OpenSSH is a free version of SSH (Secure SHell), a program for logging into and executing commands on a remote machine. This package contains the secure shell daemon (sshd). The sshd daemon allows SSH clients to securely connect to your SSH server.
name: openssh-server
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/openssh-server@9.6p1-16.oe2403sp4?arch=x86_64&epoch=0&upstream=openssh-9.6p1-16.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd8676
type: software_Package
supplied by: SPDXRef-gnrtd8710
software download location: NOASSERTION
summary: An open source implementation of SSH protocol version 2
software package version: 0:9.6p1-16.oe2403sp4
software home page: http://www.openssh.com/portable.html
description: OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and sophisticated configuration options.
name: openssh
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/openssh@9.6p1-16.oe2403sp4?arch=x86_64&epoch=0&upstream=openssh-9.6p1-16.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd96
type: software_Package
supplied by: SPDXRef-gnrtd310
software download location: NOASSERTION
summary: The non-admin shared libraries used by Kerberos 5
software package version: 0:1.21.2-20.oe2403sp4
software home page: http://web.mit.edu/kerberos/www/
description: This package contains the shared libraries needed by Kerberos 5.
name: krb5-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/krb5-libs@1.21.2-20.oe2403sp4?arch=x86_64&epoch=0&upstream=krb5-1.21.2-20.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110
type: software_Package
supplied by: SPDXRef-gnrtd238
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.5.6-4.oe2403sp4
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/openssl-libs@3.5.6-4.oe2403sp4?arch=x86_64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1