{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "qemu-system-aarch64-11.8.2.0-35.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-16T14:15:08.237702372Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/qemu-system-aarch64-11.8.2.0-35.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-cyrus-sasl-lib-2.1.28",
      "name": "cyrus-sasl-lib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5ca9ea9987967be0b9bdd5bd893a530ae4d9816fbf649e723c1e713c6b391e9c"
        }
      ],
      "description": "The cyrus-sasl-lib package contains shared libraries which are needed by\napplications which use the Cyrus SASL library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cyrus-sasl-lib@2.1.28-10.oe2403sp1?arch=x86_64&epoch=0&upstream=cyrus-sasl-2.1.28-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.cyrusimap.org/sasl/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "Shared libraries needed by applications which use Cyrus SASL",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.1.28-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-dtc-1.7.0",
      "name": "dtc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c9e76da1a2683b1df3410933a0b1a6ab867962d386942a7ea06cad961d4fd069"
        }
      ],
      "description": "The devicetree is a data structure for describing hardware. Rather than hard coding\nevery detail of a device into an operating system, many aspects of the hardware can\nbe described in a data structure that is passed to the operating system at boot time.\nThe devicetree is used by OpenFirmware, OpenPOWER Abstraction Layer (OPAL), Power\nArchitecture Platform Requirements (PAPR) and in the standalone Flattened Device\nTree (FDT) form.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/dtc@1.7.0-5.oe2403sp1?arch=x86_64&epoch=0&upstream=dtc-1.7.0-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://devicetree.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "Device tree compiler",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.7.0-5.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cafa94b041ab91d7c11726c1667787e408924afb8b37f5631ecd96688f5201da"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=x86_64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "406bf61a0c7f32534eb60e39c41da5c2c08e48c2e013fe970240acf8e8a07cf4"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gnutls-3.8.2",
      "name": "gnutls",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7040d708b693147b79abd0d2cd32ca0d3aa3ac3c1e0d3ce04958c9b217fe274f"
        }
      ],
      "description": "GnuTLS is a secure communications library implementing the SSL, TLS and DTLS\nprotocols and technologies around them. It provides a simple C language\napplication programming interface (API) to access the secure communications\nprotocols as well as APIs to parse and write X.509, PKCS #12, and other\nrequired structures.\nThe project strives to provide a secure communications back-end, simple to use\nand integrated with the rest of the base Linux libraries. A back-end designed\nto work and be secure out of the box, keeping the complexity of TLS and PKI out\nof application code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gnutls@3.8.2-11.oe2403sp1?arch=x86_64&epoch=0&upstream=gnutls-3.8.2-11.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnutls.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "The GNU Secure Communication Protocol Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.8.2-11.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libibverbs-50.0",
      "name": "libibverbs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "33a53c7ad05965d86fbd01e0f762455a276fab480aef3f85f5fab2e7b242d528"
        }
      ],
      "description": "libibverbs is a library that allows userspace processes to use RDMA\n\"verbs\" as described in the InfiniBand Architecture Specification and\nthe RDMA Protocol Verbs Specification.  This includes direct hardware\naccess from userspace to InfiniBand/iWARP adapters (kernel bypass) for\nfast path operations.\n\nDevice-specific plug-in ibverbs userspace drivers are included:\n\n- libcxgb4: Chelsio T4 iWARP HCA\n- libefa: Amazon Elastic Fabric Adapter\n- libhfi1: Intel Omni-Path HFI\n- libhns: HiSilicon Hip08/09/10 SoC\n- libipathverbs: QLogic InfiniPath HCA\n- libirdma: Intel Ethernet Connection RDMA\n- libmana: Microsoft Azure Network Adapter\n- libmlx4: Mellanox ConnectX-3 InfiniBand HCA\n- libmlx5: Mellanox Connect-IB/X-4+ InfiniBand HCA\n- libmthca: Mellanox InfiniBand HCA\n- libocrdma: Emulex OneConnect RDMA/RoCE Device\n- libqedr: QLogic QL4xxx RoCE HCA\n- librxe: A software implementation of the RoCE protocol\n- libsiw: A software implementation of the iWarp protocol\n- libvmw_pvrdma: VMware paravirtual RDMA device\n- libzrdma: ZTE Connection RDMA",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libibverbs@50.0-20.oe2403sp1?arch=x86_64&epoch=0&upstream=rdma-core-50.0-20.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/linux-rdma/rdma-core",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "A library and drivers for direct userspace use of RDMA (InfiniBand/iWARP/RoCE) hardware",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:50.0-20.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libpng-1.6.40",
      "name": "libpng",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a6ae16f10f9f6132d5071208e63dfd1e4432d403ab9f13c9ef90dc7a61123d28"
        }
      ],
      "description": "The libpng package contains libraries used by other programs for reading and writing PNG format files.\nThe PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF,\nwith many improvements and extensions and lack of patent problems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libpng@1.6.40-2.oe2403sp1?arch=x86_64&epoch=2&upstream=libpng-1.6.40-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.libpng.org/pub/png/libpng.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "A library of functions for manipulating PNG image format files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:1.6.40-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-librdmacm-50.0",
      "name": "librdmacm",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e9067ee30a1fb8482efa3b63b5c25ab7d48ca288210229464b52db11f369851d"
        }
      ],
      "description": "librdmacm provides a userspace RDMA Communication Management API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/librdmacm@50.0-20.oe2403sp1?arch=x86_64&epoch=0&upstream=rdma-core-50.0-20.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/linux-rdma/rdma-core",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "Userspace RDMA Connection Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:50.0-20.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-liburing-2.4",
      "name": "liburing",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c6660bcda1c6eb5085b8fe8f6ba5bf08e365cf87a9b83b8ae94b4ae6cb1c7bd4"
        }
      ],
      "description": "Provides native async IO for the Linux kernel, in a fast and efficient\nmanner, for both buffered and O_DIRECT.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/liburing@2.4-1.oe2403sp1?arch=x86_64&epoch=0&upstream=liburing-2.4-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://git.kernel.dk/cgit/liburing/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "Linux-native io_uring I/O access library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-pam-1.5.3",
      "name": "pam",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3f6b08348e0dbdd312e2914a3576adadb70f5504f5ea187778fb619ebe9817c8"
        }
      ],
      "description": "PAM (Pluggable Authentication Modules) is a system of libraries that\nhandle the authentication tasks of applications (services) on the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pam@1.5.3-8.oe2403sp1?arch=x86_64&epoch=0&upstream=pam-1.5.3-8.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.linux-pam.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "Pluggable Authentication Modules for Linux",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.3-8.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-qemu-8.2.0",
      "name": "qemu",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "29075c09807cfaa5f33675004f08d5b50a10730278527a249d1e5a180666cc56"
        }
      ],
      "description": "QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.\n\nQEMU has two operating modes:\n\n   Full system emulation. In this mode, QEMU emulates a full system (for example a PC),\n   including one or several processors and various peripherals. It can be used to launch\n   different Operating Systems without rebooting the PC or to debug system code.\n\n   User mode emulation. In this mode, QEMU can launch processes compiled for one CPU on another CPU.\n   It can be used to launch the Wine Windows API emulator (https://www.winehq.org) or to ease\n   cross-compilation and cross-debugging.\nYou can refer to https://www.qemu.org for more infortmation.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qemu@8.2.0-35.oe2403sp1?arch=x86_64&epoch=11&upstream=qemu-8.2.0-35.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qemu.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "QEMU is a generic and open source machine emulator and virtualizer",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "11:8.2.0-35.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-libs-255",
      "name": "systemd-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2e56e63d290dd733b591f15977767bda091da188bc68daadbe4d256ac7926cf3"
        }
      ],
      "description": "Libraries for systemd and udev.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd-libs@255-43.oe2403sp1?arch=x86_64&epoch=0&upstream=systemd-255-43.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "systemd libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-43.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "54f2ea25d0f405a90e86933cc17a9c0a763bbeb4a2cc3b54ecbd79453f73243f"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cyrus-sasl-lib-2.1.28"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-dtc-1.7.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gnutls-3.8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libibverbs-50.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libpng-1.6.40"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-librdmacm-50.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-liburing-2.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pam-1.5.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qemu-8.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-system-aarch64-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
