{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "qemu-11.8.2.0-80.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/qemu-11.8.2.0-80.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-qemu-8.2.0",
      "name": "qemu",
      "licenseConcluded": "GPLv2 and BSD and MIT and CC-BY-SA-4.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "493a337e1475e2838d1cfde641efd12793665d54429bf62f36dd6e4d363a5104"
        }
      ],
      "description": "QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.\n\nQEMU has two operating modes:\n\n   Full system emulation. In this mode, QEMU emulates a full system (for example a PC),\n   including one or several processors and various peripherals. It can be used to launch\n   different Operating Systems without rebooting the PC or to debug system code.\n\n   User mode emulation. In this mode, QEMU can launch processes compiled for one CPU on another CPU.\n   It can be used to launch the Wine Windows API emulator (https://www.winehq.org) or to ease\n   cross-compilation and cross-debugging.\nYou can refer to https://www.qemu.org for more infortmation.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qemu@8.2.0-80.oe2403sp4?arch=x86_64&epoch=11&upstream=qemu-8.2.0-80.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qemu.org",
      "licenseDeclared": "GPLv2 and BSD and MIT and CC-BY-SA-4.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "QEMU is a generic and open source machine emulator and virtualizer",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "11:8.2.0-80.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bash-5.2.15",
      "name": "bash",
      "licenseConcluded": "GPLv3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a980f85dfb01951730f94f5537d836d925d5e23cafc786f2e63f0087f69e1d93"
        }
      ],
      "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/bash",
      "licenseDeclared": "GPLv3",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "It is the Bourne Again Shell",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.15-19.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "433e473f0f3e48029a50a63e45680e5ae03a29789cc26d8952d691ea388b3b62"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-22.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-cyrus-sasl-lib-2.1.28",
      "name": "cyrus-sasl-lib",
      "licenseConcluded": "BSD with advertising",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7ad7889f64dd59c178da6fdc2e5d8816cf3f4359a4144d34cc53ecc68597f57f"
        }
      ],
      "description": "The cyrus-sasl-lib package contains shared libraries which are needed by\napplications which use the Cyrus SASL library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cyrus-sasl-lib@2.1.28-11.oe2403sp4?arch=x86_64&epoch=0&upstream=cyrus-sasl-2.1.28-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.cyrusimap.org/sasl/",
      "licenseDeclared": "BSD with advertising",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Shared libraries needed by applications which use Cyrus SASL",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.1.28-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-dtc-1.7.2",
      "name": "dtc",
      "licenseConcluded": "GPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bac465207d133d44648b21c64173d2113f332b209031cfd970f40eef96b799cd"
        }
      ],
      "description": "The devicetree is a data structure for describing hardware. Rather than hard coding\nevery detail of a device into an operating system, many aspects of the hardware can\nbe described in a data structure that is passed to the operating system at boot time.\nThe devicetree is used by OpenFirmware, OpenPOWER Abstraction Layer (OPAL), Power\nArchitecture Platform Requirements (PAPR) and in the standalone Flattened Device\nTree (FDT) form.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/dtc@1.7.2-3.oe2403sp4?arch=x86_64&epoch=0&upstream=dtc-1.7.2-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://devicetree.org/",
      "licenseDeclared": "GPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Device tree compiler",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.7.2-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d83786c70f4a2a2e5bb1e714070e09af82abddf60ecaa338d2fb22ae5ad08827"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-16.oe2403sp4?arch=x86_64&epoch=0&upstream=glib2-2.78.3-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b136cc1d6c94e7df3b522b541c89c22084f0ce440f1b9714ed930f664b10ea04"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gnutls-3.8.2",
      "name": "gnutls",
      "licenseConcluded": "LGPLv2.1+ and GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "42e90cbcc4697634c537d326e560589c9cf523d35c44d9977289b3790efff621"
        }
      ],
      "description": "GnuTLS is a secure communications library implementing the SSL, TLS and DTLS\nprotocols and technologies around them. It provides a simple C language\napplication programming interface (API) to access the secure communications\nprotocols as well as APIs to parse and write X.509, PKCS #12, and other\nrequired structures.\nThe project strives to provide a secure communications back-end, simple to use\nand integrated with the rest of the base Linux libraries. A back-end designed\nto work and be secure out of the box, keeping the complexity of TLS and PKI out\nof application code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gnutls@3.8.2-16.oe2403sp4?arch=x86_64&epoch=0&upstream=gnutls-3.8.2-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnutls.org/",
      "licenseDeclared": "LGPLv2.1+ and GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The GNU Secure Communication Protocol Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.8.2-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-intel-qpl-1.7.0",
      "name": "intel-qpl",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dd8abee493947cf4c063be2c4c1e0ffdc0abfff428ecf17bfbd3bb03a51e1807"
        }
      ],
      "description": "The Intel Query Processing Library (Intel QPL) is an open-source library to\nprovide high-performance query processing operations on Intel CPUs. Intel QPL\nis aimed to support capabilities of the new Intel In-Memory Analytics\nAccelerator (Intel IAA) available on Next Generation Intel Xeon Scalable\nprocessors, codenamed Sapphire Rapids processor, such as very high throughput\ncompression and decompression combined with primitive analytic functions, as\nwell as to provide highly-optimized SW fallback on other Intel CPUs.\nIntel QPL primarily targets applications such as big-data and in-memory\nanalytic databases.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/intel-qpl@1.7.0-1.oe2403sp4?arch=x86_64&epoch=0&upstream=intel-qpl-1.7.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/intel/qpl",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Intel Query Processing Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.7.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-keyutils-libs-1.6.3",
      "name": "keyutils-libs",
      "licenseConcluded": "GPLv2+ and LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f640b4692080ec0f72970ba40175260ef99ce01954f70eb4c8bcdd03196cee0b"
        }
      ],
      "description": "This package provides a wrapper library for the key management facility system\ncalls.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/keyutils-libs@1.6.3-9.oe2403sp4?arch=x86_64&epoch=0&upstream=keyutils-1.6.3-9.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git",
      "licenseDeclared": "GPLv2+ and LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Key utilities library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.6.3-9.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libaio-0.3.113",
      "name": "libaio",
      "licenseConcluded": "LGPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1429c8553de79e412f587c34ae2b28d4b094ce127eee710e2bb39aeb4e79da09"
        }
      ],
      "description": "The Linux-native asynchronous I/O facility (\"async I/O\", or \"aio\") has a\nricher API and capability set than the simple POSIX async I/O facility.\nThis library, libaio, provides the Linux-native API for async I/O.\nThe POSIX async I/O facility requires this library in order to provide\nkernel-accelerated async I/O capabilities, as do applications which\nrequire the Linux-native async I/O API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libaio@0.3.113-10.oe2403sp4?arch=x86_64&epoch=0&upstream=libaio-0.3.113-10.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://pagure.io/libaio",
      "licenseDeclared": "LGPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Linux-native asynchronous I/O access library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.3.113-10.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcap-ng-0.8.3",
      "name": "libcap-ng",
      "licenseConcluded": "LGPLv2+ and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f6c0c763e23058f548b2f332df056bae14289bf37d296b0efb9af1a3d28d3b85"
        }
      ],
      "description": "The libcap-ng library is intended to make programming with posix\ncapabilities much easier than the traditional libcap library.It\nincludes utilities that can analyse all currently running applications\nand print out any capabilities and whether or not it has an open\nended bounding set.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcap-ng@0.8.3-3.oe2403sp4?arch=x86_64&epoch=0&upstream=libcap-ng-0.8.3-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://people.redhat.com/sgrubb/libcap-ng",
      "licenseDeclared": "LGPLv2+ and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Libcap-ng is a library used for posix capabilities programming",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.8.3-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcurl-8.4.0",
      "name": "libcurl",
      "licenseConcluded": "curl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "770cd5a6c6bfb3c08b1a9610375e2f421679b9783d6937a0021fdab3f74cf4c8"
        }
      ],
      "description": "A library for getting files from web servers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcurl@8.4.0-30.oe2403sp4?arch=x86_64&epoch=0&upstream=curl-8.4.0-30.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://curl.se/",
      "licenseDeclared": "curl",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A library for getting files from web servers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.4.0-30.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libepoxy-1.5.10",
      "name": "libepoxy",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dc059edb5037530eb920db91c65fa271f48efdec07330b3d120f9f833a922413"
        }
      ],
      "description": "A library for handling OpenGL function pointer management.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libepoxy@1.5.10-3.oe2403sp4?arch=x86_64&epoch=0&upstream=libepoxy-1.5.10-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/anholt/libepoxy",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "library work with epoxy runtime",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.10-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgcc-12.3.1",
      "name": "libgcc",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "092db224576930eedd234726562459f564bb59dda6c5eca2b004d8abdecc8a2c"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgcc@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GCC version 12 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libibverbs-50.0",
      "name": "libibverbs",
      "licenseConcluded": "GPL-2.0-only OR BSD-2-Clause AND BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e68d2cc59b5ec46bc6e5e5de4f60862cffd1a7372672a8508e840e19094a4839"
        }
      ],
      "description": "libibverbs is a library that allows userspace processes to use RDMA\n\"verbs\" as described in the InfiniBand Architecture Specification and\nthe RDMA Protocol Verbs Specification.  This includes direct hardware\naccess from userspace to InfiniBand/iWARP adapters (kernel bypass) for\nfast path operations.\n\nDevice-specific plug-in ibverbs userspace drivers are included:\n\n- libcxgb4: Chelsio T4 iWARP HCA\n- libefa: Amazon Elastic Fabric Adapter\n- libhfi1: Intel Omni-Path HFI\n- libhns: HiSilicon Hip08/09/10 SoC\n- libipathverbs: QLogic InfiniPath HCA\n- libirdma: Intel Ethernet Connection RDMA\n- libmana: Microsoft Azure Network Adapter\n- libmlx4: Mellanox ConnectX-3 InfiniBand HCA\n- libmlx5: Mellanox Connect-IB/X-4+ InfiniBand HCA\n- libmthca: Mellanox InfiniBand HCA\n- libocrdma: Emulex OneConnect RDMA/RoCE Device\n- libqedr: QLogic QL4xxx RoCE HCA\n- librxe: A software implementation of the RoCE protocol\n- libsiw: A software implementation of the iWarp protocol\n- libvmw_pvrdma: VMware paravirtual RDMA device\n- libxscale: Yunsilicon RDMA device\n- libzrdma: ZTE Connection RDMA\n- libsxe2: SXE2 Connection RDMA",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libibverbs@50.0-47.oe2403sp4?arch=x86_64&epoch=0&upstream=rdma-core-50.0-47.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/linux-rdma/rdma-core",
      "licenseDeclared": "GPL-2.0-only OR BSD-2-Clause AND BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A library and drivers for direct userspace use of RDMA (InfiniBand/iWARP/RoCE) hardware",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:50.0-47.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libjpeg-turbo-3.0.1",
      "name": "libjpeg-turbo",
      "licenseConcluded": "IJG",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2426c7b4c35abcd55e38c896c9f5821829e1b461e80d3c2ce538bf693dadfb13"
        }
      ],
      "description": "libjpeg-turbo is a JPEG image codec that uses SIMD instructions (MMX, SSE2, NEON, AltiVec)\nto accelerate baseline JPEG compression and decompression on x86, x86-64, and ARM systems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libjpeg-turbo@3.0.1-2.oe2403sp4?arch=x86_64&epoch=0&upstream=libjpeg-turbo-3.0.1-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://sourceforge.net/projects/libjpeg-turbo",
      "licenseDeclared": "IJG",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "MMX/SSE2/SIMD accelerated libjpeg-compatible JPEG codec library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.1-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libpng-1.6.40",
      "name": "libpng",
      "licenseConcluded": "Zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7c437ba10043b46e06b8f5f4328a896448fa066b7fd560cab68f9b92d70a5413"
        }
      ],
      "description": "The libpng package contains libraries used by other programs for reading and writing PNG format files.\nThe PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF,\nwith many improvements and extensions and lack of patent problems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libpng@1.6.40-11.oe2403sp4?arch=x86_64&epoch=2&upstream=libpng-1.6.40-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.libpng.org/pub/png/libpng.html",
      "licenseDeclared": "Zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A library of functions for manipulating PNG image format files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:1.6.40-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-librdmacm-50.0",
      "name": "librdmacm",
      "licenseConcluded": "GPL-2.0-only OR BSD-2-Clause AND BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6238dfd22abe9f01ef249bc1f466b70e8330b5f73335bdb7cd670ba2cb5d9f74"
        }
      ],
      "description": "librdmacm provides a userspace RDMA Communication Management API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/librdmacm@50.0-47.oe2403sp4?arch=x86_64&epoch=0&upstream=rdma-core-50.0-47.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/linux-rdma/rdma-core",
      "licenseDeclared": "GPL-2.0-only OR BSD-2-Clause AND BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Userspace RDMA Connection Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:50.0-47.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libseccomp-2.5.4",
      "name": "libseccomp",
      "licenseConcluded": "LGPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "07f7306ba5c050657f883dcd7b9ef062491a7f82d5614fb27d13391a5ff635ae"
        }
      ],
      "description": "The libseccomp library provides an easy to use, platform independent, interface to\nthe Linux Kernel's syscall filtering mechanism. The libseccomp API is designed to\nabstract away the underlying BPF based syscall filter language and present a more\nconventional function-call based filtering interface that should be familiar to,\nand easily adopted by, application developers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libseccomp@2.5.4-5.oe2403sp4?arch=x86_64&epoch=0&upstream=libseccomp-2.5.4-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/seccomp/libseccomp",
      "licenseDeclared": "LGPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Interface to the syscall filtering mechanism",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.4-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libslirp-4.7.0",
      "name": "libslirp",
      "licenseConcluded": "BSD-3-Clause and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1bf2a65dc2e57c8c44e12176baf98cd391584b043f4b1131ddc11bb138286473"
        }
      ],
      "description": "A general purpose TCP-IP emulator used by virtual machine hypervisors\nto provide virtual networking services.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libslirp@4.7.0-2.oe2403sp4?arch=x86_64&epoch=0&upstream=libslirp-4.7.0-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.freedesktop.org/slirp/libslirp",
      "licenseDeclared": "BSD-3-Clause and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A general purpose TCP-IP emulator",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.7.0-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-liburing-2.4",
      "name": "liburing",
      "licenseConcluded": "(GPLv2 with exceptions and LGPLv2+) or MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "29cab70c671e33bd3d00ad6655e03060752ecc52cc4e8a22121362073238ce33"
        }
      ],
      "description": "Provides native async IO for the Linux kernel, in a fast and efficient\nmanner, for both buffered and O_DIRECT.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/liburing@2.4-1.oe2403sp4?arch=x86_64&epoch=0&upstream=liburing-2.4-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://git.kernel.dk/cgit/liburing/",
      "licenseDeclared": "(GPLv2 with exceptions and LGPLv2+) or MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Linux-native io_uring I/O access library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxkbcommon-1.6.0",
      "name": "libxkbcommon",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a656baa580af349370c568fbb16f98bb8cffce7ef08f0003a19b13aa3bb5e042"
        }
      ],
      "description": "xkbcommon is a library for handling of keyboard descriptions, including\nloading them from disk, parsing them and handling their state. It's mainly\nmeant for client toolkits, window systems, and other system applications",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxkbcommon@1.6.0-1.oe2403sp4?arch=x86_64&epoch=0&upstream=libxkbcommon-1.6.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.x.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "X.Org X11 XKB parsing library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.6.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-lzo-2.10",
      "name": "lzo",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3befdfe84767b4e2f49ee2bcf956db246eb82953e0a03ee3041e270c9ca126da"
        }
      ],
      "description": "LZO is a data compression library which is suitable for data\nde-/compression in real-time. This means it favours speed\nover compression ratio.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/lzo@2.10-5.oe2403sp4?arch=x86_64&epoch=0&upstream=lzo-2.10-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.oberhumer.com/opensource/lzo/",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "a real-time data compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.10-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-multipath-tools-0.9.5",
      "name": "multipath-tools",
      "licenseConcluded": "GPL-2.0-or-later and LGPL-2.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5b103a2b71062623e0a34b00776c85638ed4e159041df39e3d17c75823b61551"
        }
      ],
      "description": "This package provides the multipath tool and the multipathd daemon\nto manage dm-multipath devices. multipath can detect and set up\nmultipath maps. multipathd sets up multipath maps automatically,\nmonitors path devices for failure, removal, or addition, and applies\nthe necessary changes to the multipath maps to ensure continuous\navailability of the map devices.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/multipath-tools@0.9.5-18.oe2403sp4?arch=x86_64&epoch=0&upstream=multipath-tools-0.9.5-18.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://christophe.varoqui.free.fr/",
      "licenseDeclared": "GPL-2.0-or-later and LGPL-2.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Tools to manage multipath devices with the device-mapper",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.9.5-18.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-numactl-libs-2.0.16",
      "name": "numactl-libs",
      "licenseConcluded": "LGPLv2 and GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "10549aefe5d3a9389bd8d708af4dea97926a56b11a5276032e51ceffbf230752"
        }
      ],
      "description": "Libs for numa policy support",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/numactl-libs@2.0.16-14.oe2403sp4?arch=x86_64&epoch=0&upstream=numactl-2.0.16-14.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/numactl/numactl",
      "licenseDeclared": "LGPLv2 and GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "libnuma libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.0.16-14.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-pam-1.5.3",
      "name": "pam",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "862fc5658687c13e5c1c73a17c210193c91e1350e96329c5f09dbfc6d4992902"
        }
      ],
      "description": "PAM (Pluggable Authentication Modules) is a system of libraries that\nhandle the authentication tasks of applications (services) on the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pam@1.5.3-11.oe2403sp4?arch=x86_64&epoch=0&upstream=pam-1.5.3-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.linux-pam.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Pluggable Authentication Modules for Linux",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.3-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-pixman-0.42.2",
      "name": "pixman",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a3a5c52c715527f34d0746be0cb0a5fd193bd79afd059b8cb1b5ad750143bbe9"
        }
      ],
      "description": "Pixman is a low-level software library for pixel manipulation, providing features such\\\n\\as image compositing and trapezoid rasterization.\\",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pixman@0.42.2-1.oe2403sp4?arch=x86_64&epoch=0&upstream=pixman-0.42.2-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.freedesktop.org/pixman/pixman",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Pixman is a pixel manipulation library for X and Cairo",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.42.2-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qatzip-libs-1.2.0",
      "name": "qatzip-libs",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2b6eaf80b94b877672c2ec05f97c2aef7bc2882b0ff68b27e9fe1cd6cdc9b77a"
        }
      ],
      "description": "This package contains libraries for applications to use\nthe QATzip APIs.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qatzip-libs@1.2.0-1.oe2403sp4?arch=x86_64&epoch=0&upstream=qatzip-1.2.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/intel/QATzip",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Libraries for the qatzip package",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qemu-block-curl-8.2.0",
      "name": "qemu-block-curl",
      "licenseConcluded": "GPLv2 and BSD and MIT and CC-BY-SA-4.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3ff7409a56bdb21983e0435c29b7a4943bf1da15b84821ece28894b9c78f98d6"
        }
      ],
      "description": "This package provides block-curl support for Qemu",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qemu-block-curl@8.2.0-80.oe2403sp4?arch=x86_64&epoch=11&upstream=qemu-8.2.0-80.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qemu.org",
      "licenseDeclared": "GPLv2 and BSD and MIT and CC-BY-SA-4.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Qemu-block-curl",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "11:8.2.0-80.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qemu-block-iscsi-8.2.0",
      "name": "qemu-block-iscsi",
      "licenseConcluded": "GPLv2 and BSD and MIT and CC-BY-SA-4.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4179885a368904516015896408441e75bfc6ea29f40fc176a2153742a8d00bbe"
        }
      ],
      "description": "This package provides block-iscsi support for Qemu",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qemu-block-iscsi@8.2.0-80.oe2403sp4?arch=x86_64&epoch=11&upstream=qemu-8.2.0-80.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qemu.org",
      "licenseDeclared": "GPLv2 and BSD and MIT and CC-BY-SA-4.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Qemu-block-iscsi",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "11:8.2.0-80.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-qemu-hw-usb-host-8.2.0",
      "name": "qemu-hw-usb-host",
      "licenseConcluded": "GPLv2 and BSD and MIT and CC-BY-SA-4.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c130cea1769e7afafe04dffc81be375e3e706228635b659c501f3d81adc6095b"
        }
      ],
      "description": "This package provides hw-usb-host support for Qemu",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qemu-hw-usb-host@8.2.0-80.oe2403sp4?arch=x86_64&epoch=11&upstream=qemu-8.2.0-80.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qemu.org",
      "licenseDeclared": "GPLv2 and BSD and MIT and CC-BY-SA-4.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Qemu-hw-usb-host",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "11:8.2.0-80.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-snappy-1.1.10",
      "name": "snappy",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ccae110a3f751e5ffbf35ba52a90ad4db3523a5abc70f8d99f2da8f7119e02c2"
        }
      ],
      "description": "Snappy is a compression/decompression library. It does not aim for maximum compression,\nor compatibility with any other compression library; instead, it aims for very high\nspeeds and reasonable compression.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/snappy@1.1.10-6.oe2403sp4?arch=x86_64&epoch=0&upstream=snappy-1.1.10-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/google/snappy",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A fast compressor/decompressor",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.10-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-255",
      "name": "systemd",
      "licenseConcluded": "MIT and LGPLv2+ and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "89f5edaaa311232be2073ac7b29b8ab0c247168cfb820f63f5c52f8daf8ccdc9"
        }
      ],
      "description": "systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "MIT and LGPLv2+ and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "System and Service Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-59.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-libs-255",
      "name": "systemd-libs",
      "licenseConcluded": "LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b3dcafdf1560755cf4b2937271d1f2c44c09a57e670c980551917912e708209a"
        }
      ],
      "description": "Libraries for systemd and udev.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd-libs@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "systemd libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-59.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-virglrenderer-0.8.2",
      "name": "virglrenderer",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "02205e205fac3f8096d74506efa3328e9f008ff1ede6dcfe1c9fe68185590207"
        }
      ],
      "description": "The virgil3d rendering library is a library used by\nqemu to implement 3D GPU support for the virtio GPU.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/virglrenderer@0.8.2-3.oe2403sp4?arch=x86_64&epoch=0&upstream=virglrenderer-0.8.2-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://virgil3d.github.io",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "VirGL virtual OpenGL renderer",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.8.2-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dbb93ba5bcc987d252b148c30b5ffc4dc054b3c59ef0adcfcdecdc3ca2014514"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zstd-1.5.5",
      "name": "zstd",
      "licenseConcluded": "BSD and GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5d107debbdd734b3e9628da956b9cbcc0fd19b9493fd4d31efa6d06e5ce18bac"
        }
      ],
      "description": "Zstd is a fast lossless compression algorithm. It's backed by a very fast entropy stage,\nprovided by Huff0 and FSE library. It's a real-time compression scenario for zlib levels\nand has a better compression ratio.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zstd@1.5.5-4.oe2403sp4?arch=x86_64&epoch=0&upstream=zstd-1.5.5-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/facebook/zstd",
      "licenseDeclared": "BSD and GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A fast lossless compression algorithm",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.5-4.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cyrus-sasl-lib-2.1.28"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-dtc-1.7.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gnutls-3.8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-intel-qpl-1.7.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-keyutils-libs-1.6.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libaio-0.3.113"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcap-ng-0.8.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcurl-8.4.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libepoxy-1.5.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libibverbs-50.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libjpeg-turbo-3.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libpng-1.6.40"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-librdmacm-50.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libseccomp-2.5.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libslirp-4.7.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-liburing-2.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxkbcommon-1.6.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-lzo-2.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-multipath-tools-0.9.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-numactl-libs-2.0.16"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pam-1.5.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pixman-0.42.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qatzip-libs-1.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qemu-block-curl-8.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qemu-block-iscsi-8.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qemu-hw-usb-host-8.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-snappy-1.1.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-virglrenderer-0.8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zstd-1.5.5"
    }
  ]
}
