{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "guestfs-tools-0.1.49.5-1.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-14T14:17:38.370562542Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/guestfs-tools-0.1.49.5-1.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-curl-8.4.0",
      "name": "curl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ff00ee919b48f8e295a9fe0baf68598c207729185cfe99656867373410366d87"
        }
      ],
      "description": "cURL is a computer software project providing a library (libcurl) and\ncommand-line tool (curl) for transferring data using various protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/curl@8.4.0-3.oe2403?arch=aarch64&epoch=0&upstream=curl-8.4.0-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://curl.se/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Curl is used in command lines or scripts to transfer data",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.4.0-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "65753dc83b9eb6d41dc43e17ebcdc22b236dda32a176dad987829dc0e8503fa7"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-29.oe2403?arch=aarch64&epoch=0&upstream=glibc-2.38-29.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-29.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gnupg2-2.4.3",
      "name": "gnupg2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ce943289f51d935e88e57815767feec7fdd06cc3ab38e5cfbe14e45271b547ff"
        }
      ],
      "description": "GnuPG is a complete and free implementation of the OpenPGP standard\nas defined by RFC4880 (also known as PGP).  GnuPG enables encryption\nand signing of data and communication, and features a versatile key\nmanagement system as well as access modules for public key\ndirectories.\n\nGnuPG 2.0 adds support for smart cards and S/MIME encryption and\nsigning to the base GnuPG package.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gnupg2@2.4.3-2.oe2403?arch=aarch64&epoch=0&upstream=gnupg2-2.4.3-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gnupg.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Utility for secure communication and data storage",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4.3-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-jansson-2.14",
      "name": "jansson",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0d16d8e56b01d1431bb477072df5e7d732ef18355316d3ebb465a86ded6f31b4"
        }
      ],
      "description": "Jansson is a C library for encoding, decoding and manipulating JSON data.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jansson@2.14-3.oe2403?arch=aarch64&epoch=0&upstream=jansson-2.14-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.digip.org/jansson/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "A C library for encoding, decoding and manipulating JSON data",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.14-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libguestfs-1.49.5",
      "name": "libguestfs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e2d38c5c6e11d463004c5334412cc1e4c20e9f33cd7618a1c0ddcf5f365adc61"
        }
      ],
      "description": "libguestfs is a set of tools for accessing and modifying virtual machine (VM) disk images.\nYou can use this for viewing and editing files inside guests, scripting changes to VMs,\nmonitoring disk used/free statistics, creating guests, P2V, V2V, performing backups, cloning VMs,\nbuilding VMs, formatting disks, resizing disks, and much more.\nlibguestfs can access almost any disk image imaginable. It can do it securely — without needing\nroot and with multiple layers of defence against rogue disk images. It can access disk images\non remote machines or on CDs/USB sticks. It can access proprietary systems like VMware and Hyper-V.\nAll this functionality is available through a scriptable shell called guestfish, or an interactive\nrescue shell virt-rescue.\nlibguestfs is a C library that can be linked with C and C++ management programs and has bindings for\nabout a dozen other programming languages. Using our FUSE module you can also mount guest filesystems\non the host.\nThe hivex subproject lets you merge changes into the Windows Registry in Windows guests. You can\nexamine unknown disk images to find out what they contain.\nlibguestfs has been in continuous development since 2009, with a 250 page manual, deployed in\nenterprise environments, and with many happy and successful users.\nDozens of projects are using libguestfs today.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libguestfs@1.49.5-2.oe2403?arch=aarch64&epoch=1&upstream=libguestfs-1.49.5-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://libguestfs.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "A set of tools for accessing and modifying virtual machine (VM) disk images",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.49.5-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libvirt-libs-9.10.0",
      "name": "libvirt-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a9793e65ca7227f16c33d085e53edcda296443b7f80a4c789f43d43edf35d857"
        }
      ],
      "description": "Shared libraries for accessing the libvirt daemon.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libvirt-libs@9.10.0-10.oe2403?arch=aarch64&epoch=0&upstream=libvirt-9.10.0-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://libvirt.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Client side libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.10.0-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxcrypt-4.4.36",
      "name": "libxcrypt",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a568c528a051ab7a56be1f086883796dd250f817868da369f13280d66d6c5ab1"
        }
      ],
      "description": "libxcrypt is a modern library for one-way hashing of passwords.\nIt supports a wide variety of both modern and historical hashing\nmethods: yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt,\nsha256crypt, md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt,\nand descrypt. It provides the traditional Unix crypt and crypt_r\ninterfaces, as well as a set of extended interfaces pioneered by\nOpenwall Linux, crypt_rn, crypt_ra, crypt_gensalt, crypt_gensalt_rn,\nand crypt_gensalt_ra.\nlibxcrypt is intended to be used by login(1), passwd(1), and other\nsimilar programs; that is, to hash a small number of passwords during\nan interactive authentication dialogue with a human. It is not suitable\nfor use in bulk password-cracking applications, or in any other situation\nwhere speed is more important than careful handling of sensitive data.\nHowever, it is intended to be fast and lightweight enough for use in\nservers that must field thousands of login attempts per minute.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxcrypt@4.4.36-2.oe2403?arch=aarch64&epoch=0&upstream=libxcrypt-4.4.36-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/besser82/libxcrypt",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Extended crypt library for DES, MD5, Blowfish and others",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.4.36-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxml2-2.11.5",
      "name": "libxml2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e1dce24ed766ddf35e7af5283e5321c36592b6a33c0c6dcab75dfc726f53af9d"
        }
      ],
      "description": "This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxml2@2.11.5-3.oe2403?arch=aarch64&epoch=0&upstream=libxml2-2.11.5-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://xmlsoft.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Library providing XML and HTML support",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.11.5-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-ncurses-libs-6.4",
      "name": "ncurses-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ccaea103d93abf1000d4bd3274944db3ee28509cd60ef55c85a0d37b45b5151e"
        }
      ],
      "description": "Libraries for ncurses.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/ncurses-libs@6.4-8.oe2403?arch=aarch64&epoch=0&upstream=ncurses-6.4-8.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://invisible-island.net/ncurses/ncurses.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Libraries for ncurses",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.4-8.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-pcre2-10.42",
      "name": "pcre2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0ebbed92356754b429a0050c28b367ea65cc7eec1addb780e23b927e642c2b1a"
        }
      ],
      "description": "PCRE2 is a re-working of the original PCRE1 library to provide an entirely new\nAPI. Since its initial release in 2015, there has been further development of\nthe code and it now differs from PCRE1 in more than just the API.\nPCRE2 is written in C, and it has its own API. There are three sets of\nfunctions, one for the 8-bit library, which processes strings of bytes, one for\nthe 16-bit library, which processes strings of 16-bit values, and one for the\n32-bit library, which processes strings of 32-bit values. Unlike PCRE1, there\nare no C++ wrappers.\n\nThe distribution does contain a set of C wrapper functions for the 8-bit\nlibrary that are based on the POSIX regular expression API (see the pcre2posix\nman page). These are built into a library called libpcre2-posix. Note that this\njust provides a POSIX calling interface to PCRE2; the regular expressions\nthemselves still follow Perl syntax and semantics. The POSIX API is restricted,\nand does not give full access to all of PCRE2's facilities.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pcre2@10.42-7.oe2403?arch=aarch64&epoch=0&upstream=pcre2-10.42-7.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.pcre.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Perl Compatible Regular Expressions",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:10.42-7.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-5.4.4",
      "name": "xz",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cad12ca53ce8ca78e9879dc527d9a855b6732e121ce4cc5791c520d811f4eb0a"
        }
      ],
      "description": "XZ Utils is free general-purpose data compression software with a high compression ratio.\nXZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils.\n\nThe core of the XZ Utils compression code is based on LZMA SDK, but it has been modified quite a lot to be suitable for XZ Utils.\nThe primary compression algorithm is currently LZMA2, which is used inside the .xz container format. With typical files, XZ Utils create 30% smaller output than gzip and 15% smaller output than bzip2.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz@5.4.4-2.oe2403?arch=aarch64&epoch=0&upstream=xz-5.4.4-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "A free general-purpose data compreession software with LZMA2 algorithm",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.4-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-libs-5.4.4",
      "name": "xz-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a05a77f7cfbc069d4a8bad77b45114850f8fcf33206fa21dd5f7ffabd7405f0b"
        }
      ],
      "description": "Libraries for decoding files compressed with LZMA or XZ utils.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz-libs@5.4.4-2.oe2403?arch=aarch64&epoch=0&upstream=xz-5.4.4-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Libraries for xz",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.4-2.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-guestfs-tools-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-curl-8.4.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-guestfs-tools-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-guestfs-tools-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gnupg2-2.4.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-guestfs-tools-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jansson-2.14"
    },
    {
      "spdxElementId": "SPDXRef-rpm-guestfs-tools-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libguestfs-1.49.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-guestfs-tools-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libvirt-libs-9.10.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-guestfs-tools-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxcrypt-4.4.36"
    },
    {
      "spdxElementId": "SPDXRef-rpm-guestfs-tools-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxml2-2.11.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-guestfs-tools-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-ncurses-libs-6.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-guestfs-tools-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pcre2-10.42"
    },
    {
      "spdxElementId": "SPDXRef-rpm-guestfs-tools-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-5.4.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-guestfs-tools-1.49.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-libs-5.4.4"
    }
  ]
}