{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "qemu-user-11.8.2.0-53.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-16T14:15:08.237702372Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/qemu-user-11.8.2.0-53.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cafa94b041ab91d7c11726c1667787e408924afb8b37f5631ecd96688f5201da"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-10.oe2403sp1?arch=x86_64&epoch=0&upstream=glib2-2.78.3-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "406bf61a0c7f32534eb60e39c41da5c2c08e48c2e013fe970240acf8e8a07cf4"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gnutls-3.8.2",
      "name": "gnutls",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7040d708b693147b79abd0d2cd32ca0d3aa3ac3c1e0d3ce04958c9b217fe274f"
        }
      ],
      "description": "GnuTLS is a secure communications library implementing the SSL, TLS and DTLS\nprotocols and technologies around them. It provides a simple C language\napplication programming interface (API) to access the secure communications\nprotocols as well as APIs to parse and write X.509, PKCS #12, and other\nrequired structures.\nThe project strives to provide a secure communications back-end, simple to use\nand integrated with the rest of the base Linux libraries. A back-end designed\nto work and be secure out of the box, keeping the complexity of TLS and PKI out\nof application code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gnutls@3.8.2-11.oe2403sp1?arch=x86_64&epoch=0&upstream=gnutls-3.8.2-11.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnutls.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "The GNU Secure Communication Protocol Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.8.2-11.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-liburing-2.4",
      "name": "liburing",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c6660bcda1c6eb5085b8fe8f6ba5bf08e365cf87a9b83b8ae94b4ae6cb1c7bd4"
        }
      ],
      "description": "Provides native async IO for the Linux kernel, in a fast and efficient\nmanner, for both buffered and O_DIRECT.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/liburing@2.4-1.oe2403sp1?arch=x86_64&epoch=0&upstream=liburing-2.4-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://git.kernel.dk/cgit/liburing/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "Linux-native io_uring I/O access library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-qemu-8.2.0",
      "name": "qemu",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "29075c09807cfaa5f33675004f08d5b50a10730278527a249d1e5a180666cc56"
        }
      ],
      "description": "QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.\n\nQEMU has two operating modes:\n\n   Full system emulation. In this mode, QEMU emulates a full system (for example a PC),\n   including one or several processors and various peripherals. It can be used to launch\n   different Operating Systems without rebooting the PC or to debug system code.\n\n   User mode emulation. In this mode, QEMU can launch processes compiled for one CPU on another CPU.\n   It can be used to launch the Wine Windows API emulator (https://www.winehq.org) or to ease\n   cross-compilation and cross-debugging.\nYou can refer to https://www.qemu.org for more infortmation.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qemu@8.2.0-35.oe2403sp1?arch=x86_64&epoch=11&upstream=qemu-8.2.0-35.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qemu.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "QEMU is a generic and open source machine emulator and virtualizer",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "11:8.2.0-35.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "54f2ea25d0f405a90e86933cc17a9c0a763bbeb4a2cc3b54ecbd79453f73243f"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "sourceInfo": "acquired package info from repodata DB: repodata/1e9e517490e627182a173b99be812700d86db4782dd8e70517e6881c5499f9e5-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-qemu-user-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-user-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-user-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gnutls-3.8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-user-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-liburing-2.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-user-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qemu-8.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-user-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
