{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "qemu-11.8.2.0-67.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-15T09:02:54.150722539Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/qemu-11.8.2.0-67.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-glib2-2.78.3",
      "name": "glib2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "968d688f91c671a0a9f862d552776fa7f9e5318a20a9ad8488b7c8ab588423b1"
        }
      ],
      "description": "GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glib2@2.78.3-13.oe2403sp3?arch=aarch64&epoch=0&upstream=glib2-2.78.3-13.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gtk.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "The core library that forms the basis for projects such as GTK+ and GNOME",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.78.3-13.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ddc32e0b4d9456930df864f399edc41b74031a659bbd0668c3e84ae7f47fba94"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp3?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-gnutls-3.8.2",
      "name": "gnutls",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4a008f609e4435e1da4cf23ea686e74d6c10574074fa5f5d1d6fc641cc0535b9"
        }
      ],
      "description": "GnuTLS is a secure communications library implementing the SSL, TLS and DTLS\nprotocols and technologies around them. It provides a simple C language\napplication programming interface (API) to access the secure communications\nprotocols as well as APIs to parse and write X.509, PKCS #12, and other\nrequired structures.\nThe project strives to provide a secure communications back-end, simple to use\nand integrated with the rest of the base Linux libraries. A back-end designed\nto work and be secure out of the box, keeping the complexity of TLS and PKI out\nof application code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gnutls@3.8.2-11.oe2403sp3?arch=aarch64&epoch=0&upstream=gnutls-3.8.2-11.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnutls.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "The GNU Secure Communication Protocol Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.8.2-11.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcurl-8.4.0",
      "name": "libcurl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "09670a3a71ebe9b667753f9cb4734c0c8fe75d647e5af4396b227dd226281d27"
        }
      ],
      "description": "A library for getting files from web servers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcurl@8.4.0-26.oe2403sp3?arch=aarch64&epoch=0&upstream=curl-8.4.0-26.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://curl.se/",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "A library for getting files from web servers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.4.0-26.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-libibverbs-50.0",
      "name": "libibverbs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "72384b5e6c74eca5d25d111f503604d2fa243696852fe9735f143a44a7de9771"
        }
      ],
      "description": "libibverbs is a library that allows userspace processes to use RDMA\n\"verbs\" as described in the InfiniBand Architecture Specification and\nthe RDMA Protocol Verbs Specification.  This includes direct hardware\naccess from userspace to InfiniBand/iWARP adapters (kernel bypass) for\nfast path operations.\n\nDevice-specific plug-in ibverbs userspace drivers are included:\n\n- libcxgb4: Chelsio T4 iWARP HCA\n- libefa: Amazon Elastic Fabric Adapter\n- libhfi1: Intel Omni-Path HFI\n- libhns: HiSilicon Hip08/09/10 SoC\n- libipathverbs: QLogic InfiniPath HCA\n- libirdma: Intel Ethernet Connection RDMA\n- libmana: Microsoft Azure Network Adapter\n- libmlx4: Mellanox ConnectX-3 InfiniBand HCA\n- libmlx5: Mellanox Connect-IB/X-4+ InfiniBand HCA\n- libmthca: Mellanox InfiniBand HCA\n- libocrdma: Emulex OneConnect RDMA/RoCE Device\n- libqedr: QLogic QL4xxx RoCE HCA\n- librxe: A software implementation of the RoCE protocol\n- libsiw: A software implementation of the iWarp protocol\n- libvmw_pvrdma: VMware paravirtual RDMA device\n- libxscale: Yunsilicon RDMA device\n- libzrdma: ZTE Connection RDMA",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libibverbs@50.0-41.oe2403sp3?arch=aarch64&epoch=0&upstream=rdma-core-50.0-41.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/linux-rdma/rdma-core",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "A library and drivers for direct userspace use of RDMA (InfiniBand/iWARP/RoCE) hardware",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:50.0-41.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-libpng-1.6.40",
      "name": "libpng",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2f9c2276d757d51a6ddf3add5b6660af93dba7d7162f4d533817dfa6e1f282e9"
        }
      ],
      "description": "The libpng package contains libraries used by other programs for reading and writing PNG format files.\nThe PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF,\nwith many improvements and extensions and lack of patent problems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libpng@1.6.40-5.oe2403sp3?arch=aarch64&epoch=2&upstream=libpng-1.6.40-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.libpng.org/pub/png/libpng.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "A library of functions for manipulating PNG image format files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:1.6.40-5.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-librdmacm-50.0",
      "name": "librdmacm",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "55c81fe3d13d63a1584a86a17c77f0378b7185f90151d7b81f370976dad4649f"
        }
      ],
      "description": "librdmacm provides a userspace RDMA Communication Management API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/librdmacm@50.0-41.oe2403sp3?arch=aarch64&epoch=0&upstream=rdma-core-50.0-41.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/linux-rdma/rdma-core",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "Userspace RDMA Connection Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:50.0-41.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-qemu-block-curl-8.2.0",
      "name": "qemu-block-curl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3854b0ae1ecf5ef19bdb45d16d34bd5bef06f742355106643eda8f33516ea198"
        }
      ],
      "description": "This package provides block-curl support for Qemu",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qemu-block-curl@8.2.0-67.oe2403sp3?arch=aarch64&epoch=11&upstream=qemu-8.2.0-67.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qemu.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "Qemu-block-curl",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "11:8.2.0-67.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-qemu-block-iscsi-8.2.0",
      "name": "qemu-block-iscsi",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "01e94672248a86decfbf993b6e3f19ad215276b3af20591298204d85c070f918"
        }
      ],
      "description": "This package provides block-iscsi support for Qemu",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qemu-block-iscsi@8.2.0-67.oe2403sp3?arch=aarch64&epoch=11&upstream=qemu-8.2.0-67.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qemu.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "Qemu-block-iscsi",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "11:8.2.0-67.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-qemu-hw-usb-host-8.2.0",
      "name": "qemu-hw-usb-host",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8e8e697b5aef897bfaf1b03ebd6b2d3c33fa1b0e1f9f90cdbad8cce9844091ce"
        }
      ],
      "description": "This package provides hw-usb-host support for Qemu",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qemu-hw-usb-host@8.2.0-67.oe2403sp3?arch=aarch64&epoch=11&upstream=qemu-8.2.0-67.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.qemu.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "Qemu-hw-usb-host",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "11:8.2.0-67.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-255",
      "name": "systemd",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3eb2c8f2192fc525d9cf8fd89df23fab61a0bb885cfc91d1793fa5f99656b441"
        }
      ],
      "description": "systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd@255-57.oe2403sp3?arch=aarch64&epoch=0&upstream=systemd-255-57.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "System and Service Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-57.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-libs-255",
      "name": "systemd-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "215195cfc7578e851c42ec140ca11433dc1a98792b89d877defc2453269ca484"
        }
      ],
      "description": "Libraries for systemd and udev.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd-libs@255-57.oe2403sp3?arch=aarch64&epoch=0&upstream=systemd-255-57.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "systemd libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-57.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5130eb6aecea73f74d04ca756ee5bd7ddd7b972a4594cb29ea020bb5be27a6a9"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp3?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "sourceInfo": "acquired package info from repodata DB: repodata/52b58895fae6f14330de6aaf6e21a224d23ae69cfa8282ec378cba6fd709d291-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glib2-2.78.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gnutls-3.8.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcurl-8.4.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libibverbs-50.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libpng-1.6.40"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-librdmacm-50.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qemu-block-curl-8.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qemu-block-iscsi-8.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qemu-hw-usb-host-8.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-qemu-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
