type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd1489
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd81
from: xz-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19167
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19168
from: fuse3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd498
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd499
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd268
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd269
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2269
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2270
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1491
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd81
from: xz-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2349
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2350
from: systemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1417
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1418
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9346
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd9347
from: gpgme
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd502
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd439
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd440
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd547
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19281
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd4208
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1509
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1510
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19276
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19277
from: grub2-pc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd236
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9349
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd9350
from: gpgme
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9181
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd9182
from: gnupg2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16961
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd16962
from: dracut
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19283
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd4208
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2256
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2257
from: libgpg-error
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd189
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd190
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd186
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd187
from: zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19164
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd19165
from: fuse3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd239
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: openssl-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd442
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd443
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd549
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd550
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2346
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2347
from: systemd
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3798
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd3799
from: gobject-introspection
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd510
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd511
from: libselinux
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd265
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd266
from: glib2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3795
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd3796
from: gobject-introspection
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16964
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd16965
from: dracut
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1420
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1418
from: libcurl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd258
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd259
from: libmount
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd513
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd514
from: libselinux
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9184
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd9185
from: gnupg2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd261
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd262
from: libmount
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2253
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2254
from: libgpg-error
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19279
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd19280
from: grub2-pc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2272
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2273
from: systemd-libs
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1512
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1513
from: libarchive
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19175
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libmount
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19181
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: xz-libs
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19180
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gobject-introspection
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19169
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libselinux
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19187
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: grub2-pc
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19186
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: zlib
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19185
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gpgme
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19174
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: dracut
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19171
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl-libs
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19170
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glib2
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19176
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19177
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19159
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: fuse3
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19179
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: systemd-libs
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19173
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libgpg-error
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19183
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19182
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libarchive
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19178
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gnupg2
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19172
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19184
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libcurl
from: ostree
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd547
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3796
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19168
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2257
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2254
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3799
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9347
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd190
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2273
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd443
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd511
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd262
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd550
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2347
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd187
type: simplelicensing_LicenseExpression
simplelicensing license expression: zlib and Boost
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16962
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-2.0-or-later AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd81
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-3.0-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9182
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1510
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd259
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9185
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1418
type: simplelicensing_LicenseExpression
simplelicensing license expression: curl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4208
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19277
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2270
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd440
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd266
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1513
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd514
type: simplelicensing_LicenseExpression
simplelicensing license expression: Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2350
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT and LGPLv2+ and GPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9350
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19280
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd269
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd237
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19165
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16965
type: simplelicensing_LicenseExpression
simplelicensing license expression: (GPL-2.0-or-later AND LGPL-2.1-or-later)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd260
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd238
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9348
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd188
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd548
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2271
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19278
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19282
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9183
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd267
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd512
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16963
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2348
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1490
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1419
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19166
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2255
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3797
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1511
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9341
type: software_Package
supplied by: SPDXRef-gnrtd9348
software download location: NOASSERTION
summary: GnuPG Made Easy
software package version: 0:1.21.0-3.oe2403sp4
software home page: https://gnupg.org/related_software/gpgme/
description: GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG easier for applications. It provides a high-level crypto API for encryption, decryption, signing, signature verification and key management. This package provides C/C++/Qt/Python API support for GPGME.
name: gpgme
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/gpgme@1.21.0-3.oe2403sp4?arch=x86_64&epoch=0&upstream=gpgme-1.21.0-3.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2173
type: software_Package
supplied by: SPDXRef-gnrtd2348
software download location: NOASSERTION
summary: System and Service Manager
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: systemd is a system and service manager that runs as PID 1 and starts the rest of the system.
name: systemd
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/systemd@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd15
type: software_Package
supplied by: SPDXRef-gnrtd512
software download location: NOASSERTION
summary: SELinux library and simple utilities
software package version: 0:3.5-9.oe2403sp4
software home page: https://github.com/SELinuxProject/selinux/wiki
description: libselinux provides an interface to get and set process and file security contexts and to obtain security policy decisions.
name: libselinux
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libselinux@3.5-9.oe2403sp4?arch=x86_64&epoch=0&upstream=libselinux-3.5-9.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd253
type: software_Package
supplied by: SPDXRef-gnrtd260
software download location: NOASSERTION
summary: Library for device mounting
software package version: 0:2.39.1-38.oe2403sp4
software home page: https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git
description: This package is the library for device mounting.
name: libmount
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libmount@2.39.1-38.oe2403sp4?arch=x86_64&epoch=0&upstream=util-linux-2.39.1-38.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1471
type: software_Package
supplied by: SPDXRef-gnrtd1511
software download location: NOASSERTION
summary: Multi-format archive and compression library
software package version: 0:3.7.1-11.oe2403sp4
software home page: https://www.libarchive.org/
description: libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.
name: libarchive
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libarchive@3.7.1-11.oe2403sp4?arch=x86_64&epoch=0&upstream=libarchive-3.7.1-11.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19188
type: software_Package
supplied by: SPDXRef-gnrtd19278
software download location: NOASSERTION
summary: Bootloader with support for Linux, Multiboot, and more
software package version: 1:2.12-52.oe2403sp4
software home page: http://www.gnu.org/software/grub/
description: %{desc} This subpackage provides support for pc systems.
name: grub2-pc
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/grub2-pc@2.12-52.oe2403sp4?arch=x86_64&epoch=1&upstream=grub2-2.12-52.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd548
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd246
type: software_Package
supplied by: SPDXRef-gnrtd267
software download location: NOASSERTION
summary: The core library that forms the basis for projects such as GTK+ and GNOME
software package version: 0:2.78.3-16.oe2403sp4
software home page: https://www.gtk.org
description: GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.
name: glib2
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=x86_64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19160
type: software_Package
supplied by: SPDXRef-gnrtd19166
software download location: NOASSERTION
summary: User space File System of fuse3
software package version: 0:3.16.2-3.oe2403sp4
software home page: http://fuse.sf.net
description: FUSE (Filesystem in Userspace) is an interface for userspace programs to export a filesystem to the Linux kernel. The FUSE project consists of two components: the fuse kernel module (maintained in the regular kernel repositories) and the libfuse userspace library (maintained in this repository). libfuse provides the reference implementation for communicating with the FUSE kernel module.
name: fuse3
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/fuse3@3.16.2-3.oe2403sp4?arch=x86_64&epoch=0&upstream=fuse3-3.16.2-3.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd16935
type: software_Package
supplied by: SPDXRef-gnrtd16963
software download location: NOASSERTION
summary: Initramfs generator using udev
software package version: 0:059-16.oe2403sp4
software home page: https://dracut.wiki.kernel.org/
description: dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package.
name: dracut
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/dracut@059-16.oe2403sp4?arch=x86_64&epoch=0&upstream=dracut-059-16.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31
type: software_Package
supplied by: SPDXRef-gnrtd441
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9143
type: software_Package
supplied by: SPDXRef-gnrtd9183
software download location: NOASSERTION
summary: Utility for secure communication and data storage
software package version: 0:2.4.3-15.oe2403sp4
software home page: https://gnupg.org/
description: GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. GnuPG 2.0 adds support for smart cards and S/MIME encryption and signing to the base GnuPG package.
name: gnupg2
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/gnupg2@2.4.3-15.oe2403sp4?arch=x86_64&epoch=0&upstream=gnupg2-2.4.3-15.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2251
type: software_Package
supplied by: SPDXRef-gnrtd2255
software download location: NOASSERTION
summary: Library for common error values and messages in GnuPG components.
software package version: 0:1.47-1.oe2403sp4
software home page: https://www.gnupg.org/related_software/libgpg-error/
description: The libgpg-error package contains a library that originally defines common error values for all GnuPG components. Among these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt, Libksba, DirMngr, Pinentry, SCdaemon. Because Libgpg-error is a common dependency all GnuPG components, more features will be added to this library.
name: libgpg-error
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libgpg-error@1.47-1.oe2403sp4?arch=x86_64&epoch=0&upstream=libgpg-error-1.47-1.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2244
type: software_Package
supplied by: SPDXRef-gnrtd2271
software download location: NOASSERTION
summary: systemd libraries
software package version: 0:255-59.oe2403sp4
software home page: https://systemd.io/
description: Libraries for systemd and udev.
name: systemd-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/systemd-libs@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21
type: software_Package
supplied by: SPDXRef-gnrtd500
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1487
type: software_Package
supplied by: SPDXRef-gnrtd1490
software download location: NOASSERTION
summary: Libraries for xz
software package version: 0:5.4.7-8.oe2403sp4
software home page: http://tukaani.org/xz
description: Libraries for decoding files compressed with LZMA or XZ utils.
name: xz-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/xz-libs@5.4.7-8.oe2403sp4?arch=x86_64&epoch=0&upstream=xz-5.4.7-8.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd3791
type: software_Package
supplied by: SPDXRef-gnrtd3797
software download location: NOASSERTION
summary: Introspection system for GObject-based libraries
software package version: 0:1.76.1-4.oe2403sp4
software home page: https://wiki.gnome.org/Projects/GObjectIntrospection
description: GObject Introspection can scan C header and source files in order to generate introspection "typelib" files. It also provides an API to examine typelib files, useful for creating language bindings among other things.
name: gobject-introspection
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/gobject-introspection@1.76.1-4.oe2403sp4?arch=x86_64&epoch=0&upstream=gobject-introspection-1.76.1-4.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd19158
type: software_Package
supplied by: SPDXRef-gnrtd19282
software download location: NOASSERTION
summary: Tool for managing bootable, immutable filesystem trees
software package version: 0:2024.4-1.oe2403sp4
software home page: https://ostree.readthedocs.io/en/latest/
description: This project is now known as "libostree", though it is still appropriate to use the previous name: "OSTree" (or "ostree"). The focus is on projects which use libostree's shared library, rather than users directly invoking the command line tools (except for build systems). However, in most of the rest of the documentation, we will use the term "OSTree", since it's slightly shorter, and changing all documentation at once is impractical.
name: ostree
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/ostree@2024.4-1.oe2403sp4?arch=x86_64&epoch=0&upstream=ostree-2024.4-1.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd184
type: software_Package
supplied by: SPDXRef-gnrtd188
software download location: NOASSERTION
summary: A lossless data-compression library
software package version: 0:1.2.13-5.oe2403sp4
software home page: http://www.zlib.net
description: Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.
name: zlib
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1337
type: software_Package
supplied by: SPDXRef-gnrtd1419
software download location: NOASSERTION
summary: A library for getting files from web servers
software package version: 0:8.4.0-30.oe2403sp4
software home page: https://curl.se/
description: A library for getting files from web servers.
name: libcurl
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libcurl@8.4.0-30.oe2403sp4?arch=x86_64&epoch=0&upstream=curl-8.4.0-30.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd110
type: software_Package
supplied by: SPDXRef-gnrtd238
software download location: NOASSERTION
summary: A general purpose cryptography library with TLS implementation
software package version: 1:3.5.6-4.oe2403sp4
software home page: https://www.openssl.org/
description: The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.
name: openssl-libs
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/openssl-libs@3.5.6-4.oe2403sp4?arch=x86_64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1