{ "SPDXID": "SPDXRef-DOCUMENT", "name": "ostree-0.2024.4-1.oe2403sp4.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-07-04T02:24:06.585354077Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/ostree-0.2024.4-1.oe2403sp4.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-ostree-2024.4", "name": "ostree", "licenseConcluded": "LGPL-2.0-or-later", "checksums": [ { "algorithm": "SHA256", "checksumValue": "7869664a5e6c1e4177b80026ebc239c977080fbe2f89adbff992be025ce8c775" } ], "description": "This project is now known as \"libostree\", though it is still appropriate to use the previous name: \"OSTree\"\n(or \"ostree\"). The focus is on projects which use libostree's shared library, rather than users directly\ninvoking the command line tools (except for build systems). However, in most of the rest of the documentation,\nwe will use the term \"OSTree\", since it's slightly shorter, and changing all documentation at once is impractical.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/ostree@2024.4-1.oe2403sp4?arch=x86_64&epoch=0&upstream=ostree-2024.4-1.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://ostree.readthedocs.io/en/latest/", "licenseDeclared": "LGPL-2.0-or-later", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Tool for managing bootable, immutable filesystem trees", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2024.4-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-bash-5.2.15", "name": "bash", "licenseConcluded": "GPLv3", "checksums": [ { "algorithm": "SHA256", "checksumValue": "a980f85dfb01951730f94f5537d836d925d5e23cafc786f2e63f0087f69e1d93" } ], "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gnu.org/software/bash", "licenseDeclared": "GPLv3", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "It is the Bourne Again Shell", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.2.15-19.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-coreutils-9.4", "name": "coreutils", "licenseConcluded": "GPLv3+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "433e473f0f3e48029a50a63e45680e5ae03a29789cc26d8952d691ea388b3b62" } ], "description": "These are the GNU core utilities. This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gnu.org/software/coreutils/", "licenseDeclared": "GPLv3+", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "A set of basic GNU tools commonly used in shell scripts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:9.4-22.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-dracut-059", "name": "dracut", "licenseConcluded": "GPL-2.0-or-later AND LGPL-2.1-or-later", "checksums": [ { "algorithm": "SHA256", "checksumValue": "12434758c7374913d09df3f363db94d70b835177deace8c2489015a56dfa9847" } ], "description": "dracut contains tools to create bootable initramfses for the Linux\nkernel. Unlike previous implementations, dracut hard-codes as little\nas possible into the initramfs. dracut contains various modules which\nare driven by the event-based udev. Having root on MD, DM, LVM2, LUKS\nis supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network\npackage.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/dracut@059-16.oe2403sp4?arch=x86_64&epoch=0&upstream=dracut-059-16.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://dracut.wiki.kernel.org/", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Initramfs generator using udev", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:059-16.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-fuse3-3.16.2", "name": "fuse3", "licenseConcluded": "GPL+ and LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b7b88679cc62a96a35a9b931f626b167c9ff91037e02fe97d6ba03c3cdd48be9" } ], "description": "FUSE (Filesystem in Userspace) is an interface for userspace programs to export\na filesystem to the Linux kernel. The FUSE project consists of two components:\nthe fuse kernel module (maintained in the regular kernel repositories) and the\nlibfuse userspace library (maintained in this repository). libfuse provides the\nreference implementation for communicating with the FUSE kernel module.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/fuse3@3.16.2-3.oe2403sp4?arch=x86_64&epoch=0&upstream=fuse3-3.16.2-3.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://fuse.sf.net", "licenseDeclared": "GPL+ and LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "User space File System of fuse3", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.16.2-3.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-glib2-2.78.3", "name": "glib2", "licenseConcluded": "LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d83786c70f4a2a2e5bb1e714070e09af82abddf60ecaa338d2fb22ae5ad08827" } ], "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=x86_64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gtk.org", "licenseDeclared": "LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "The core library that forms the basis for projects such as GTK+ and GNOME", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.78.3-16.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-glibc-2.38", "name": "glibc", "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b136cc1d6c94e7df3b522b541c89c22084f0ce440f1b9714ed930f664b10ea04" } ], "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.gnu.org/software/glibc/", "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "The GNU libc libraries", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.38-107.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-gnupg2-2.4.3", "name": "gnupg2", "licenseConcluded": "GPLv3+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9afb6deb255109f3791880a9fa423486e26af0d9d58515992119ee44f0ea7e6f" } ], "description": "GnuPG is a complete and free implementation of the OpenPGP standard\nas defined by RFC4880 (also known as PGP). GnuPG enables encryption\nand signing of data and communication, and features a versatile key\nmanagement system as well as access modules for public key\ndirectories.\n\nGnuPG 2.0 adds support for smart cards and S/MIME encryption and\nsigning to the base GnuPG package.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/gnupg2@2.4.3-15.oe2403sp4?arch=x86_64&epoch=0&upstream=gnupg2-2.4.3-15.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gnupg.org/", "licenseDeclared": "GPLv3+", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Utility for secure communication and data storage", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.4.3-15.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-gobject-introspection-1.76.1", "name": "gobject-introspection", "licenseConcluded": "GPLv2+ and LGPLv2+ and MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d35db215253256181c1957773ef1ed6871134723c4374174196ad7506039bbd1" } ], "description": "GObject Introspection can scan C header and source files in order to\ngenerate introspection \"typelib\" files. It also provides an API to examine\ntypelib files, useful for creating language bindings among other\nthings.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/gobject-introspection@1.76.1-4.oe2403sp4?arch=x86_64&epoch=0&upstream=gobject-introspection-1.76.1-4.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://wiki.gnome.org/Projects/GObjectIntrospection", "licenseDeclared": "GPLv2+ and LGPLv2+ and MIT", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Introspection system for GObject-based libraries", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.76.1-4.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-gpgme-1.21.0", "name": "gpgme", "licenseConcluded": "GPLv2+ and LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "a07b49f29ab0d7e6d71ca845fb3532e418a3cdd1662b3b5cf094430f3bb5874d" } ], "description": "GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG\neasier for applications. It provides a high-level crypto API for\nencryption, decryption, signing, signature verification and key\nmanagement.\nThis package provides C/C++/Qt/Python API support for GPGME.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/gpgme@1.21.0-3.oe2403sp4?arch=x86_64&epoch=0&upstream=gpgme-1.21.0-3.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gnupg.org/related_software/gpgme/", "licenseDeclared": "GPLv2+ and LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "GnuPG Made Easy", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.21.0-3.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-grub2-pc-2.12", "name": "grub2-pc", "licenseConcluded": "GPLv3+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "a723458568ed00d1d40791bc54bc6baba1be642b14a04dc4a67d05f5619e19c2" } ], "description": "%{desc}\nThis subpackage provides support for pc systems.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/grub2-pc@2.12-52.oe2403sp4?arch=x86_64&epoch=1&upstream=grub2-2.12-52.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.gnu.org/software/grub/", "licenseDeclared": "GPLv3+", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Bootloader with support for Linux, Multiboot, and more", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:2.12-52.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libarchive-3.7.1", "name": "libarchive", "licenseConcluded": "BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "5a707fb030e3f19486003dc68ddf201448a692bd2b35b841f749c560aa22e46c" } ], "description": "libarchive is an open-source BSD-licensed C programming library that\nprovides streaming access to a variety of different archive formats,\nincluding tar, cpio, pax, zip, and ISO9660 images. The distribution\nalso includes bsdtar and bsdcpio, full-featured implementations of\ntar and cpio that use libarchive.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libarchive@3.7.1-11.oe2403sp4?arch=x86_64&epoch=0&upstream=libarchive-3.7.1-11.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.libarchive.org/", "licenseDeclared": "BSD", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Multi-format archive and compression library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.7.1-11.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libcurl-8.4.0", "name": "libcurl", "licenseConcluded": "curl", "checksums": [ { "algorithm": "SHA256", "checksumValue": "770cd5a6c6bfb3c08b1a9610375e2f421679b9783d6937a0021fdab3f74cf4c8" } ], "description": "A library for getting files from web servers.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libcurl@8.4.0-30.oe2403sp4?arch=x86_64&epoch=0&upstream=curl-8.4.0-30.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://curl.se/", "licenseDeclared": "curl", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "A library for getting files from web servers", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:8.4.0-30.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libgpg-error-1.47", "name": "libgpg-error", "licenseConcluded": "LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "52a0bb89a051144f775342555f812bc2e09426e038270c433f25e9b9d239829d" } ], "description": "The libgpg-error package contains a library that originally defines common error values for all GnuPG components.\nAmong these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt, Libksba, DirMngr, Pinentry, SCdaemon.\nBecause Libgpg-error is a common dependency all GnuPG components, more features will be added to this library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libgpg-error@1.47-1.oe2403sp4?arch=x86_64&epoch=0&upstream=libgpg-error-1.47-1.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gnupg.org/related_software/libgpg-error/", "licenseDeclared": "LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Library for common error values and messages in GnuPG components.", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.47-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libmount-2.39.1", "name": "libmount", "licenseConcluded": "LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "f92995398085e5fee6d4723e83b08d75f061122fb378811be5ffb2ec955f9148" } ], "description": "This package is the library for device mounting.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libmount@2.39.1-38.oe2403sp4?arch=x86_64&epoch=0&upstream=util-linux-2.39.1-38.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git", "licenseDeclared": "LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Library for device mounting", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.39.1-38.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libselinux-3.5", "name": "libselinux", "licenseConcluded": "Public Domain", "checksums": [ { "algorithm": "SHA256", "checksumValue": "f3f45423da2ed4926ec347da0f02722d668826c00928b174d42bbf2db5bce2a4" } ], "description": "libselinux provides an interface to get and set process and file\nsecurity contexts and to obtain security policy decisions.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libselinux@3.5-9.oe2403sp4?arch=x86_64&epoch=0&upstream=libselinux-3.5-9.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/SELinuxProject/selinux/wiki", "licenseDeclared": "Public Domain", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "SELinux library and simple utilities", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.5-9.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-openssl-libs-3.5.6", "name": "openssl-libs", "licenseConcluded": "Apache-2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "c8c19a74b9e9791bab592e1e581bbcdf43a5e8d05a705ecd6acd3cc2c130ce17" } ], "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/openssl-libs@3.5.6-4.oe2403sp4?arch=x86_64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.openssl.org/", "licenseDeclared": "Apache-2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "A general purpose cryptography library with TLS implementation", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:3.5.6-4.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-systemd-255", "name": "systemd", "licenseConcluded": "MIT and LGPLv2+ and GPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "89f5edaaa311232be2073ac7b29b8ab0c247168cfb820f63f5c52f8daf8ccdc9" } ], "description": "systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/systemd@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://systemd.io/", "licenseDeclared": "MIT and LGPLv2+ and GPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "System and Service Manager", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:255-59.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-systemd-libs-255", "name": "systemd-libs", "licenseConcluded": "LGPLv2+ and MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b3dcafdf1560755cf4b2937271d1f2c44c09a57e670c980551917912e708209a" } ], "description": "Libraries for systemd and udev.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/systemd-libs@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://systemd.io/", "licenseDeclared": "LGPLv2+ and MIT", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "systemd libraries", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:255-59.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-xz-libs-5.4.7", "name": "xz-libs", "licenseConcluded": "GPL-3.0-only", "checksums": [ { "algorithm": "SHA256", "checksumValue": "6a4bce47e9a22dc0dd94bf765d6b49f710e5d320c9e3f7ff9e48f90f12cbbc94" } ], "description": "Libraries for decoding files compressed with LZMA or XZ utils.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/xz-libs@5.4.7-8.oe2403sp4?arch=x86_64&epoch=0&upstream=xz-5.4.7-8.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://tukaani.org/xz", "licenseDeclared": "GPL-3.0-only", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Libraries for xz", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.4.7-8.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-zlib-1.2.13", "name": "zlib", "licenseConcluded": "zlib and Boost", "checksums": [ { "algorithm": "SHA256", "checksumValue": "dbb93ba5bcc987d252b148c30b5ffc4dc054b3c59ef0adcfcdecdc3ca2014514" } ], "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.zlib.net", "licenseDeclared": "zlib and Boost", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "A lossless data-compression library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.2.13-5.oe2403sp4" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-dracut-059" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-fuse3-3.16.2" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-gnupg2-2.4.3" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-gobject-introspection-1.76.1" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-gpgme-1.21.0" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-grub2-pc-2.12" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libarchive-3.7.1" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libcurl-8.4.0" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libgpg-error-1.47" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libmount-2.39.1" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libselinux-3.5" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.5.6" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-systemd-255" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-xz-libs-5.4.7" }, { "spdxElementId": "SPDXRef-rpm-ostree-2024.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13" } ] }