diff --git a/examples/image.yaml b/examples/image.yaml new file mode 100644 index 0000000..030d1a4 --- /dev/null +++ b/examples/image.yaml @@ -0,0 +1,21 @@ +apiVersion: storage.sbombastic.rancher.io/v1alpha1 +kind: Image +metadata: + creationTimestamp: "2024-11-15T16:02:47Z" + name: 82df15a51db0bb0182ee86c6d084c43d1c2731e36c68900ee59c88747dd4af10 + namespace: default + resourceVersion: "1" + uid: be4efbf7-feb9-4952-8a7f-04ec03c89c9b +spec: + imageMetadata: + digest: sha256:6169c4bcc1982095067d85edf58fdcc3bd8505aef728610c5b728f3cf1cec46b + platform: linux/amd64 + registry: my-first-registry + registryURI: docker-registry.default.svc.cluster.local + repository: ubuntu + tag: latest + layers: + - command: L2Jpbi9zaCAtYyAjKG5vcCkgQUREIGZpbGU6MzRkYzRmM2FiN2E2OTRlY2RlNDdmZjdhNjEwYmUxODU5MTgzNGM0NWYxZDcyNTE4MTMyNjc3OTg0MTI2MDRlNSBpbiAvIA== + diffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af + digest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708 +status: {} diff --git a/examples/sbom.yaml b/examples/sbom.yaml index 8decf6b..1c77ce8 100644 --- a/examples/sbom.yaml +++ b/examples/sbom.yaml @@ -1,11 +1,4013 @@ apiVersion: storage.sbombastic.rancher.io/v1alpha1 kind: SBOM metadata: - name: sbom-example + creationTimestamp: "2024-11-15T16:02:50Z" + name: 82df15a51db0bb0182ee86c6d084c43d1c2731e36c68900ee59c88747dd4af10 namespace: default - labels: - sbombastic.rancher.io/registry: registry-example - sbombastic.rancher.io/repository: test + resourceVersion: "1" + uid: 81f04e99-82ed-4d7b-95ef-434dc0757e25 spec: - data: - foo: bar + imageMetadata: + digest: sha256:6169c4bcc1982095067d85edf58fdcc3bd8505aef728610c5b728f3cf1cec46b + platform: linux/amd64 + registry: my-first-registry + registryURI: docker-registry.default.svc.cluster.local + repository: ubuntu + tag: latest + spdx: + SPDXID: SPDXRef-DOCUMENT + creationInfo: + created: "2024-11-15T16:02:50Z" + creators: + - "Organization: aquasecurity" + - "Tool: trivy-dev" + dataLicense: CC0-1.0 + documentNamespace: http://aquasecurity.github.io/trivy/container_image/docker-registry.default.svc.cluster.local/ubuntu:latest-5fb0aadf-7635-417a-8cf8-fedc01caf8ff + name: docker-registry.default.svc.cluster.local/ubuntu:latest + packages: + - SPDXID: SPDXRef-ContainerImage-6a7c9b66d6ae91e4 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "DiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "ImageID: sha256:59ab366372d56772eb54e426183435e6b0642152cb449ec7ab52473af8ca6e3f" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "Labels:org.opencontainers.image.ref.name: ubuntu" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "Labels:org.opencontainers.image.version: 24.04" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "RepoDigest: docker-registry.default.svc.cluster.local/ubuntu@sha256:6169c4bcc1982095067d85edf58fdcc3bd8505aef728610c5b728f3cf1cec46b" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "RepoTag: docker-registry.default.svc.cluster.local/ubuntu:latest" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "SchemaVersion: 2" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:oci/ubuntu@sha256%3A6169c4bcc1982095067d85edf58fdcc3bd8505aef728610c5b728f3cf1cec46b?arch=amd64&repository_url=docker-registry.default.svc.cluster.local%2Fubuntu + referenceType: purl + filesAnalyzed: false + name: docker-registry.default.svc.cluster.local/ubuntu:latest + primaryPackagePurpose: CONTAINER + - SPDXID: SPDXRef-Package-a9dd59790c53adcc + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: apt@2.7.14build2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 72b4e9ba826544fa87e9101857432ebfa61c29ec4e091fcd67396cde9b9c6459 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/apt@2.7.14build2?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-2.0-only AND BSD-3-Clause AND MIT + licenseDeclared: GPL-2.0-or-later AND GPL-2.0-only AND BSD-3-Clause AND MIT + name: apt + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: apt 2.7.14build2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.7.14build2 + - SPDXID: SPDXRef-Package-3d5477f483d7c3f6 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: base-files@13ubuntu10.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/base-files@13ubuntu10.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later + licenseDeclared: GPL-2.0-or-later + name: base-files + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: base-files 13ubuntu10.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 13ubuntu10.1 + - SPDXID: SPDXRef-Package-e960f5881a80a60e + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: base-passwd@3.6.3build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 8514590aa2d82aa32d6beb32525f1e4577949f625eee1990b4b7b71b5ef26679 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/base-passwd@3.6.3build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-only AND public-domain + licenseDeclared: GPL-2.0-only AND public-domain + name: base-passwd + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: base-passwd 3.6.3build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.6.3build1 + - SPDXID: SPDXRef-Package-cee99b0b13fe911a + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: bash@5.2.21-2ubuntu4" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 73de311a21e094e29ac01527d2b52226cc87fde0a5b57032902251b426d92c66 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/bash@5.2.21-2ubuntu4?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-3.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later WITH + Bison-exception AND GPL-2.0-or-later AND GPL-2.0-only AND GFDL-1.3-no-invariants-only + AND GFDL-1.3-only AND Latex2e AND BSD-4-Clause-UC AND MIT AND permissive + licenseDeclared: GPL-3.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later WITH + Bison-exception AND GPL-2.0-or-later AND GPL-2.0-only AND GFDL-1.3-no-invariants-only + AND GFDL-1.3-only AND Latex2e AND BSD-4-Clause-UC AND MIT AND permissive + name: bash + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: bash 5.2.21-2ubuntu4" + supplier: "Organization: Ubuntu Developers " + versionInfo: 5.2.21-2ubuntu4 + - SPDXID: SPDXRef-Package-4e4e0862757a85f3 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: bsdutils@1:2.39.3-9ubuntu6.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/bsdutils@2.39.3-9ubuntu6.1?arch=amd64&distro=ubuntu-24.04&epoch=1 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + licenseDeclared: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + name: bsdutils + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: util-linux 2.39.3-9ubuntu6.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1:2.39.3-9ubuntu6.1 + - SPDXID: SPDXRef-Package-d21171b896631d29 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: coreutils@9.4-3ubuntu6" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 0d19c3e94f04ff1aafde46701fe1783da0a068a4904adc3794c30140f1aaeb8f + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/coreutils@9.4-3ubuntu6?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-3.0-or-later AND BSD-4-Clause-UC AND GPL-3.0-only AND + ISC AND FSFULLR AND GFDL-1.3-no-invariants-only AND GFDL-1.3-only + licenseDeclared: GPL-3.0-or-later AND BSD-4-Clause-UC AND GPL-3.0-only AND ISC + AND FSFULLR AND GFDL-1.3-no-invariants-only AND GFDL-1.3-only + name: coreutils + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: coreutils 9.4-3ubuntu6" + supplier: "Organization: Ubuntu Developers " + versionInfo: 9.4-3ubuntu6 + - SPDXID: SPDXRef-Package-e03159ca65250b60 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: dash@0.5.12-6ubuntu5" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: e97728d8deaa51300255f0572bbd68b9549e0894a184c056dc420fc4e0ba0781 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/dash@0.5.12-6ubuntu5?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND public-domain AND GPL-2.0-or-later AND GPL-2.0-only + licenseDeclared: BSD-3-Clause AND public-domain AND GPL-2.0-or-later AND GPL-2.0-only + name: dash + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: dash 0.5.12-6ubuntu5" + supplier: "Organization: Ubuntu Developers " + versionInfo: 0.5.12-6ubuntu5 + - SPDXID: SPDXRef-Package-c163e44328178d7a + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: debconf@1.5.86ubuntu1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: bb390da466a7461bfc87aa3e6b7cd145dae84af3e26bf437f2c0c218ba226294 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/debconf@1.5.86ubuntu1?arch=all&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-2-Clause + licenseDeclared: BSD-2-Clause + name: debconf + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: debconf 1.5.86ubuntu1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.5.86ubuntu1 + - SPDXID: SPDXRef-Package-9684164e42b51fa6 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: debianutils@5.17build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 1047a9a57018e18531f76e5b00e226a68554b6f1d147f2a5c1b32518c7b20636 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/debianutils@5.17build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-2.0-only AND public-domain AND SMAIL-GPL + licenseDeclared: GPL-2.0-or-later AND GPL-2.0-only AND public-domain AND SMAIL-GPL + name: debianutils + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: debianutils 5.17build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 5.17build1 + - SPDXID: SPDXRef-Package-4360c8e5fdcd2831 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: diffutils@1:3.10-1build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: f9b8ff6528114ba4c6a9ec94570c838a266f9f196969ae08f310725fa830d958 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/diffutils@3.10-1build1?arch=amd64&distro=ubuntu-24.04&epoch=1 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-3.0-or-later AND FSFULLR AND LGPL-2.1-or-later AND GPL-3.0-only + WITH autoconf-exception+ AND GPL-3.0-only AND GPL-3.0-or-later WITH texinfo-exception + AND LGPL-2.0-or-later AND GPL-2.0-or-later AND X11 AND FSFAP AND GFDL-1.3-no-invariants-only + AND LGPL-3.0-or-later AND LGPL-3.0-only AND public-domain AND LGPL-2.0-only + AND LGPL-2.1-only AND GPL-2.0-only AND GFDL-1.3-only + licenseDeclared: GPL-3.0-or-later AND FSFULLR AND LGPL-2.1-or-later AND GPL-3.0-only + WITH autoconf-exception+ AND GPL-3.0-only AND GPL-3.0-or-later WITH texinfo-exception + AND LGPL-2.0-or-later AND GPL-2.0-or-later AND X11 AND FSFAP AND GFDL-1.3-no-invariants-only + AND LGPL-3.0-or-later AND LGPL-3.0-only AND public-domain AND LGPL-2.0-only + AND LGPL-2.1-only AND GPL-2.0-only AND GFDL-1.3-only + name: diffutils + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: diffutils 1:3.10-1build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1:3.10-1build1 + - SPDXID: SPDXRef-Package-91915b4b24baa5c6 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: dpkg@1.22.6ubuntu6.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/dpkg@1.22.6ubuntu6.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND public-domain-s-s-d AND GPL-2.0-only + licenseDeclared: GPL-2.0-or-later AND public-domain-s-s-d AND GPL-2.0-only + name: dpkg + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: dpkg 1.22.6ubuntu6.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.22.6ubuntu6.1 + - SPDXID: SPDXRef-Package-8253cad11eb81144 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: e2fsprogs@1.47.0-2.4~exp1ubuntu4.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/e2fsprogs@1.47.0-2.4~exp1ubuntu4.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-only AND LGPL-2.0-only AND BSD-3-Clause AND Apache-2.0 + AND ISC AND GPL-2.0-or-later AND MIT-US-export AND Kazlib AND Latex2e AND + GPL-2.0-or-later WITH Texinfo-exception + licenseDeclared: GPL-2.0-only AND LGPL-2.0-only AND BSD-3-Clause AND Apache-2.0 + AND ISC AND GPL-2.0-or-later AND MIT-US-export AND Kazlib AND Latex2e AND + GPL-2.0-or-later WITH Texinfo-exception + name: e2fsprogs + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: e2fsprogs 1.47.0-2.4~exp1ubuntu4.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.47.0-2.4~exp1ubuntu4.1 + - SPDXID: SPDXRef-Package-97c7d45dc448824f + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: findutils@4.9.0-5build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 96490acdee09245bb47ff4684dc59a7ac3b29619da868ef3e9d8323c61a02ac4 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/findutils@4.9.0-5build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GFDL-1.3-no-invariants-or-later AND GPL-3.0-or-later AND FSFAP + AND GPL-3.0-or-later WITH Autoconf-data-exception AND FSFULLR AND GPL-2.0-or-later + WITH Autoconf-data-exception AND GPL-2.0-or-later AND X11 AND public-domain + AND GPL-2.0-or-later WITH automake-exception AND LGPL-2.1-or-later AND LGPL-2.0-or-later + AND LGPL-3.0-or-later AND BSD-3-clause-and-or-GPL-3+ AND GPL-3.0-or-later + WITH Bison-2.2-exception AND LGPL-3.0-only AND ISC-and-or-LGPL-2.1+ AND BSD-3-Clause + AND GFDL-1.3-only AND GPL-2.0-only AND GPL-3.0-only AND ISC AND LGPL-2.0-only + AND LGPL-2.1-only + licenseDeclared: GFDL-1.3-no-invariants-or-later AND GPL-3.0-or-later AND FSFAP + AND GPL-3.0-or-later WITH Autoconf-data-exception AND FSFULLR AND GPL-2.0-or-later + WITH Autoconf-data-exception AND GPL-2.0-or-later AND X11 AND public-domain + AND GPL-2.0-or-later WITH automake-exception AND LGPL-2.1-or-later AND LGPL-2.0-or-later + AND LGPL-3.0-or-later AND BSD-3-clause-and-or-GPL-3+ AND GPL-3.0-or-later + WITH Bison-2.2-exception AND LGPL-3.0-only AND ISC-and-or-LGPL-2.1+ AND BSD-3-Clause + AND GFDL-1.3-only AND GPL-2.0-only AND GPL-3.0-only AND ISC AND LGPL-2.0-only + AND LGPL-2.1-only + name: findutils + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: findutils 4.9.0-5build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 4.9.0-5build1 + - SPDXID: SPDXRef-Package-34b46b102ce27e5f + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: gcc-14-base@14-20240412-0ubuntu1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: bc5a682c694a1ce5af50772b7c737a21e9a74f0f0edaae98e97bc9c4af583fef + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/gcc-14-base@14-20240412-0ubuntu1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-3.0-only AND GFDL-1.2-only AND Artistic-2.0 + AND LGPL-2.0-or-later + licenseDeclared: GPL-2.0-or-later AND GPL-3.0-only AND GFDL-1.2-only AND Artistic-2.0 + AND LGPL-2.0-or-later + name: gcc-14-base + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: gcc-14 14-20240412-0ubuntu1" + supplier: "Organization: Ubuntu Core developers " + versionInfo: 14-20240412-0ubuntu1 + - SPDXID: SPDXRef-Package-7212a37577a28b61 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: gpgv@2.4.4-2ubuntu17" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 59303f676f8002f2c82698ba76037f8dab4debad2c19619bf4d78bb817201a27 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/gpgv@2.4.4-2ubuntu17?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-3.0-or-later AND permissive AND LGPL-2.1-or-later AND + LGPL-3.0-or-later AND GPL-2.0-or-later AND MIT AND BSD-3-Clause AND RFC-Reference + AND TinySCHEME AND CC0-1.0 AND GPL-3.0-only AND LGPL-3.0-only AND LGPL-2.1-only + AND GPL-2.0-only + licenseDeclared: GPL-3.0-or-later AND permissive AND LGPL-2.1-or-later AND LGPL-3.0-or-later + AND GPL-2.0-or-later AND MIT AND BSD-3-Clause AND RFC-Reference AND TinySCHEME + AND CC0-1.0 AND GPL-3.0-only AND LGPL-3.0-only AND LGPL-2.1-only AND GPL-2.0-only + name: gpgv + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: gnupg2 2.4.4-2ubuntu17" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.4.4-2ubuntu17 + - SPDXID: SPDXRef-Package-948030578d3a65ea + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: grep@3.11-4build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: fc0fdc5983ea3d3579ccf335e51dec69684a0dd9bb915734999c5733add9507a + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/grep@3.11-4build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-3.0-or-later AND GPL-3.0-only + licenseDeclared: GPL-3.0-or-later AND GPL-3.0-only + name: grep + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: grep 3.11-4build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.11-4build1 + - SPDXID: SPDXRef-Package-378d3a10b22f634c + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: gzip@1.12-1ubuntu3" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: d38bb6657d6bd909422ec862c268fb44256eb50df27a8229ceb525cdfafe92a4 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/gzip@1.12-1ubuntu3?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-3.0-or-later AND GFDL-1.3--no-invariant AND FSF-manpages + AND GPL-3.0-only AND GFDL-3 + licenseDeclared: GPL-3.0-or-later AND GFDL-1.3--no-invariant AND FSF-manpages + AND GPL-3.0-only AND GFDL-3 + name: gzip + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: gzip 1.12-1ubuntu3" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.12-1ubuntu3 + - SPDXID: SPDXRef-Package-c5252d543d426624 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: hostname@3.23+nmu2ubuntu2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: c9b3109d868c1e5a26f0bd10e005171420d83f6da84a527aa6293bc350892504 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/hostname@3.23%2Bnmu2ubuntu2?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-only + licenseDeclared: GPL-2.0-only + name: hostname + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: hostname 3.23+nmu2ubuntu2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.23+nmu2ubuntu2 + - SPDXID: SPDXRef-Package-31f64c62365a2552 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: init-system-helpers@1.66ubuntu1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 8eb801f9ce084dab9bf4cbc3ec0ee5ac75516a4cc1f25e3f92298c632e75b700 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/init-system-helpers@1.66ubuntu1?arch=all&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND GPL-2.0-or-later AND GPL-2.0-only + licenseDeclared: BSD-3-Clause AND GPL-2.0-or-later AND GPL-2.0-only + name: init-system-helpers + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: init-system-helpers 1.66ubuntu1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.66ubuntu1 + - SPDXID: SPDXRef-Package-9322059e7cdf64cc + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libacl1@2.3.2-1build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 892dd9edaded972367e19713e5b0a3144409d9ef6613da5b7734a56f8e8f582b + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libacl1@2.3.2-1build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-2.0-only AND LGPL-2.0-or-later AND + LGPL-2.1-only + licenseDeclared: GPL-2.0-or-later AND GPL-2.0-only AND LGPL-2.0-or-later AND + LGPL-2.1-only + name: libacl1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: acl 2.3.2-1build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.3.2-1build1 + - SPDXID: SPDXRef-Package-c4479c9fb06de154 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libapt-pkg6.0t64@2.7.14build2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 3915b0cdfbaae551d9089400f47be749b89c30914985982b39e57fd2016be852 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libapt-pkg6.0t64@2.7.14build2?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-2.0-only AND BSD-3-Clause AND MIT + licenseDeclared: GPL-2.0-or-later AND GPL-2.0-only AND BSD-3-Clause AND MIT + name: libapt-pkg6.0t64 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: apt 2.7.14build2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.7.14build2 + - SPDXID: SPDXRef-Package-2ed5f6aa913ae7f9 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libassuan0@2.5.6-1build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 59c6ee6aa6fffb5d181f37373baec18c26791f5d1c907ceeb62163460b11daf2 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libassuan0@2.5.6-1build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-or-later AND GAP-FSF AND LGPL-3.0-or-later AND LGPL-3.0-only + AND GPL-2.0-or-later WITH libtool-exception AND GPL-2.0-only AND GPL-3.0-or-later + AND GPL-3.0-only AND GAP AND GPL-2.0-or-later AND LGPL-2.1-only + licenseDeclared: LGPL-2.1-or-later AND GAP-FSF AND LGPL-3.0-or-later AND LGPL-3.0-only + AND GPL-2.0-or-later WITH libtool-exception AND GPL-2.0-only AND GPL-3.0-or-later + AND GPL-3.0-only AND GAP AND GPL-2.0-or-later AND LGPL-2.1-only + name: libassuan0 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libassuan 2.5.6-1build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.5.6-1build1 + - SPDXID: SPDXRef-Package-ac6533704ac2d874 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libattr1@1:2.5.2-1build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 204e45dde86d1cf762114bd91fdab9d820de08e3da8216c7b25382924a96aa9f + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libattr1@2.5.2-1build1?arch=amd64&distro=ubuntu-24.04&epoch=1 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-2.0-only AND LGPL-2.0-or-later AND + LGPL-2.1-only + licenseDeclared: GPL-2.0-or-later AND GPL-2.0-only AND LGPL-2.0-or-later AND + LGPL-2.1-only + name: libattr1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: attr 1:2.5.2-1build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1:2.5.2-1build1 + - SPDXID: SPDXRef-Package-2a455139afa28343 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libaudit-common@1:3.1.2-2.1build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: f2dd99597b416cff8cefeb350c1e4eb7e15fc6f7a57cd37f4a4c11f4a8049a92 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libaudit-common@3.1.2-2.1build1?arch=all&distro=ubuntu-24.04&epoch=1 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-only AND LGPL-2.1-only AND GPL-1.0-only + licenseDeclared: GPL-2.0-only AND LGPL-2.1-only AND GPL-1.0-only + name: libaudit-common + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: audit 1:3.1.2-2.1build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1:3.1.2-2.1build1 + - SPDXID: SPDXRef-Package-eb64eb8d23b18c9c + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libaudit1@1:3.1.2-2.1build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: ab7708324073d0978b3355e0bc265192c57711e81847d01458c305332ea7f98e + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libaudit1@3.1.2-2.1build1?arch=amd64&distro=ubuntu-24.04&epoch=1 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-only AND LGPL-2.1-only AND GPL-1.0-only + licenseDeclared: GPL-2.0-only AND LGPL-2.1-only AND GPL-1.0-only + name: libaudit1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: audit 1:3.1.2-2.1build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1:3.1.2-2.1build1 + - SPDXID: SPDXRef-Package-64053bc84ca7ff71 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libblkid1@2.39.3-9ubuntu6.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libblkid1@2.39.3-9ubuntu6.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + licenseDeclared: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + name: libblkid1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: util-linux 2.39.3-9ubuntu6.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.39.3-9ubuntu6.1 + - SPDXID: SPDXRef-Package-b438afbb88ee4714 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libbz2-1.0@1.0.8-5.1build0.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libbz2-1.0@1.0.8-5.1build0.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND GPL-2.0-only + licenseDeclared: BSD-3-Clause AND GPL-2.0-only + name: libbz2-1.0 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: bzip2 1.0.8-5.1build0.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.0.8-5.1build0.1 + - SPDXID: SPDXRef-Package-2c8cc9b9c082272d + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libc-bin@2.39-0ubuntu8.3" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libc-bin@2.39-0ubuntu8.3?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-only AND GPL-2.0-only AND GFDL-1.3-only + licenseDeclared: LGPL-2.1-only AND GPL-2.0-only AND GFDL-1.3-only + name: libc-bin + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: glibc 2.39-0ubuntu8.3" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.39-0ubuntu8.3 + - SPDXID: SPDXRef-Package-e9c79ebe32be8b8d + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libc6@2.39-0ubuntu8.3" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libc6@2.39-0ubuntu8.3?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-only AND GPL-2.0-only AND GFDL-1.3-only + licenseDeclared: LGPL-2.1-only AND GPL-2.0-only AND GFDL-1.3-only + name: libc6 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: glibc 2.39-0ubuntu8.3" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.39-0ubuntu8.3 + - SPDXID: SPDXRef-Package-43070f7a4cc6adc6 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libcap-ng0@0.8.4-2build2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: cf1e9437ac7ddf6539dbe87b68858cbdef84d78c6aac243ab3b6e564a52ed930 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libcap-ng0@0.8.4-2build2?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-or-later AND GPL-2.0-or-later AND GPL-3.0-only AND + LGPL-2.1-only AND GPL-2.0-only + licenseDeclared: LGPL-2.1-or-later AND GPL-2.0-or-later AND GPL-3.0-only AND + LGPL-2.1-only AND GPL-2.0-only + name: libcap-ng0 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libcap-ng 0.8.4-2build2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 0.8.4-2build2 + - SPDXID: SPDXRef-Package-69503b0842716bf3 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libcap2@1:2.66-5ubuntu2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: a6cce0b5f149707a6359e4f03a05fb7417c5e1d3fde9e12c651e804b4c479bbb + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libcap2@2.66-5ubuntu2?arch=amd64&distro=ubuntu-24.04&epoch=1 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later + licenseDeclared: BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later + name: libcap2 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libcap2 1:2.66-5ubuntu2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1:2.66-5ubuntu2 + - SPDXID: SPDXRef-Package-f43f220427100476 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libcom-err2@1.47.0-2.4~exp1ubuntu4.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libcom-err2@1.47.0-2.4~exp1ubuntu4.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-only AND LGPL-2.0-only AND BSD-3-Clause AND Apache-2.0 + AND ISC AND GPL-2.0-or-later AND MIT-US-export AND Kazlib AND Latex2e AND + GPL-2.0-or-later WITH Texinfo-exception + licenseDeclared: GPL-2.0-only AND LGPL-2.0-only AND BSD-3-Clause AND Apache-2.0 + AND ISC AND GPL-2.0-or-later AND MIT-US-export AND Kazlib AND Latex2e AND + GPL-2.0-or-later WITH Texinfo-exception + name: libcom-err2 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: e2fsprogs 1.47.0-2.4~exp1ubuntu4.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.47.0-2.4~exp1ubuntu4.1 + - SPDXID: SPDXRef-Package-801f1b60720011d1 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libcrypt1@1:4.4.36-4build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 9474785cd6f398512bf8c305c3901dbb111569dccb6f5832002373c0a8ac5832 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libcrypt1@4.4.36-4build1?arch=amd64&distro=ubuntu-24.04&epoch=1 + referenceType: purl + filesAnalyzed: false + licenseConcluded: NOASSERTION + licenseDeclared: NOASSERTION + name: libcrypt1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libxcrypt 1:4.4.36-4build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1:4.4.36-4build1 + - SPDXID: SPDXRef-Package-23f5b7d2ab5551da + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libdb5.3t64@5.3.28+dfsg2-7" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libdb5.3t64@5.3.28%2Bdfsg2-7?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: Sleepycat AND BSD-3-Clause AND MS-PL AND GPL-2.0-or-later + AND Artistic-2.0 AND X11 AND MIT-old AND TCL-like AND BSD-3-clause-fjord AND + GPL-3.0-only AND Zlib + licenseDeclared: Sleepycat AND BSD-3-Clause AND MS-PL AND GPL-2.0-or-later AND + Artistic-2.0 AND X11 AND MIT-old AND TCL-like AND BSD-3-clause-fjord AND GPL-3.0-only + AND Zlib + name: libdb5.3t64 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: db5.3 5.3.28+dfsg2-7" + supplier: "Organization: Ubuntu Developers " + versionInfo: 5.3.28+dfsg2-7 + - SPDXID: SPDXRef-Package-8c4979b9660231a9 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libdebconfclient0@0.271ubuntu3" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 0a07d284ca6e2ee18208b3bf9ddc19da803d96db8230cdf26d16ac3aae5b7893 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libdebconfclient0@0.271ubuntu3?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-2-Clause AND GPL-2.0-or-later AND GPL-2.0-only + licenseDeclared: BSD-2-Clause AND GPL-2.0-or-later AND GPL-2.0-only + name: libdebconfclient0 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: cdebconf 0.271ubuntu3" + supplier: "Organization: Ubuntu Developers " + versionInfo: 0.271ubuntu3 + - SPDXID: SPDXRef-Package-766a9b398538bb9e + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libext2fs2t64@1.47.0-2.4~exp1ubuntu4.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libext2fs2t64@1.47.0-2.4~exp1ubuntu4.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-only AND LGPL-2.0-only AND BSD-3-Clause AND Apache-2.0 + AND ISC AND GPL-2.0-or-later AND MIT-US-export AND Kazlib AND Latex2e AND + GPL-2.0-or-later WITH Texinfo-exception + licenseDeclared: GPL-2.0-only AND LGPL-2.0-only AND BSD-3-Clause AND Apache-2.0 + AND ISC AND GPL-2.0-or-later AND MIT-US-export AND Kazlib AND Latex2e AND + GPL-2.0-or-later WITH Texinfo-exception + name: libext2fs2t64 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: e2fsprogs 1.47.0-2.4~exp1ubuntu4.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.47.0-2.4~exp1ubuntu4.1 + - SPDXID: SPDXRef-Package-a9089025225e0aec + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libffi8@3.4.6-1build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 637e6a7744de08cd331a41f4efd0d24e6ea9064843dea9d1c6ca87bdb5f038a2 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libffi8@3.4.6-1build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: MIT AND X11 AND GPL-2.0-or-later AND GPL-3.0-or-later AND + MPL-1.1 AND LGPL-2.1-or-later AND public-domain + licenseDeclared: MIT AND X11 AND GPL-2.0-or-later AND GPL-3.0-or-later AND MPL-1.1 + AND LGPL-2.1-or-later AND public-domain + name: libffi8 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libffi 3.4.6-1build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.4.6-1build1 + - SPDXID: SPDXRef-Package-667d6307ee408b7d + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libgcc-s1@14-20240412-0ubuntu1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: a39efdcaa2245f026dc3254ce14fcff255fc430a17064632b6ba7c5da974a912 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libgcc-s1@14-20240412-0ubuntu1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: NOASSERTION + licenseDeclared: NOASSERTION + name: libgcc-s1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: gcc-14 14-20240412-0ubuntu1" + supplier: "Organization: Ubuntu Core developers " + versionInfo: 14-20240412-0ubuntu1 + - SPDXID: SPDXRef-Package-155ccf6e4743dd21 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libgcrypt20@1.10.3-2build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: ff32bae487706ba6ca646b5b72d89b935e3b8b2811d02e4ad7360cb97d90e2d0 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libgcrypt20@1.10.3-2build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.0-or-later AND GPL-2.0-only + licenseDeclared: LGPL-2.0-or-later AND GPL-2.0-only + name: libgcrypt20 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libgcrypt20 1.10.3-2build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.10.3-2build1 + - SPDXID: SPDXRef-Package-ca8b4da9184dc4dc + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libgmp10@2:6.3.0+dfsg-2ubuntu6" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 649a5ee5f74f0aa1e1b9c4f169eabbae56a79aa5aac51ef733eb9e18700bd8fc + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libgmp10@6.3.0%2Bdfsg-2ubuntu6?arch=amd64&distro=ubuntu-24.04&epoch=2 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND LGPL-3.0-or-later AND GPL-3.0-or-later + AND GPL-3.0-or-later WITH Bison-exception AND GPL-2.0-only AND GPL-3.0-only + AND LGPL-3.0-only + licenseDeclared: GPL-2.0-or-later AND LGPL-3.0-or-later AND GPL-3.0-or-later + AND GPL-3.0-or-later WITH Bison-exception AND GPL-2.0-only AND GPL-3.0-only + AND LGPL-3.0-only + name: libgmp10 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: gmp 2:6.3.0+dfsg-2ubuntu6" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2:6.3.0+dfsg-2ubuntu6 + - SPDXID: SPDXRef-Package-6a34e62debac6a04 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libgnutls30t64@3.8.3-1.1ubuntu3.2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libgnutls30t64@3.8.3-1.1ubuntu3.2?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-only AND LGPL-2.0-or-later AND LGPL-3.0-only AND + GPL-2.0-or-later AND GPL-3.0-only AND GFDL-1.3-only AND CC0-1.0 AND MIT AND + Apache-2.0 AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-3.0-or-later + AND BSD-3-Clause + licenseDeclared: LGPL-2.1-only AND LGPL-2.0-or-later AND LGPL-3.0-only AND GPL-2.0-or-later + AND GPL-3.0-only AND GFDL-1.3-only AND CC0-1.0 AND MIT AND Apache-2.0 AND + LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-3.0-or-later AND BSD-3-Clause + name: libgnutls30t64 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: gnutls28 3.8.3-1.1ubuntu3.2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.8.3-1.1ubuntu3.2 + - SPDXID: SPDXRef-Package-56d6044cdac6e48b + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libgpg-error0@1.47-3build2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 81a30b5888e0af43b72bfdbdb44209b82e521eadf8848ff201542e6d258f6a1f + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libgpg-error0@1.47-3build2?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-or-later AND BSD-3-Clause AND g10-permissive AND + GPL-3.0-or-later AND LGPL-2.1-only AND GPL-3.0-only + licenseDeclared: LGPL-2.1-or-later AND BSD-3-Clause AND g10-permissive AND GPL-3.0-or-later + AND LGPL-2.1-only AND GPL-3.0-only + name: libgpg-error0 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libgpg-error 1.47-3build2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.47-3build2 + - SPDXID: SPDXRef-Package-5c17e63a57047a3f + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libhogweed6t64@3.9.1-2.2build1.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libhogweed6t64@3.9.1-2.2build1.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later + AND LGPL-2.0-only AND MIT AND GPL-3.0-only WITH autoconf-exception+ AND public-domain + AND GPL-2.0-only AND GAP + licenseDeclared: LGPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later + AND LGPL-2.0-only AND MIT AND GPL-3.0-only WITH autoconf-exception+ AND public-domain + AND GPL-2.0-only AND GAP + name: libhogweed6t64 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: nettle 3.9.1-2.2build1.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.9.1-2.2build1.1 + - SPDXID: SPDXRef-Package-c4c0615eae38e5e + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libidn2-0@2.3.7-2build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: f1be32391a2fabf06c27618a2000ae8f9a26c30fad1b482a007049ae8156d19c + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libidn2-0@2.3.7-2build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-3.0-or-later AND LGPL-3.0-or-later AND GPL-2.0-or-later + AND Unicode AND GPL-3.0-only AND GPL-2.0-only AND LGPL-3.0-only + licenseDeclared: GPL-3.0-or-later AND LGPL-3.0-or-later AND GPL-2.0-or-later + AND Unicode AND GPL-3.0-only AND GPL-2.0-only AND LGPL-3.0-only + name: libidn2-0 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libidn2 2.3.7-2build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.3.7-2build1 + - SPDXID: SPDXRef-Package-60f18dc8dbb86bfe + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: liblz4-1@1.9.4-1build1.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/liblz4-1@1.9.4-1build1.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-2-Clause AND GPL-2.0-or-later AND GPL-2.0-only + licenseDeclared: BSD-2-Clause AND GPL-2.0-or-later AND GPL-2.0-only + name: liblz4-1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: lz4 1.9.4-1build1.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.9.4-1build1.1 + - SPDXID: SPDXRef-Package-966545d05f814cb5 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: liblzma5@5.6.1+really5.4.5-1build0.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/liblzma5@5.6.1%2Breally5.4.5-1build0.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: PD AND probably-PD AND GPL-2.0-or-later AND LGPL-2.1-or-later + AND permissive-fsf AND Autoconf AND permissive-nowarranty AND GPL-2.0-only + AND none AND config-h AND LGPL-2.0-only AND LGPL-2.1-only AND noderivs AND + PD-debian AND GPL-3.0-only + licenseDeclared: PD AND probably-PD AND GPL-2.0-or-later AND LGPL-2.1-or-later + AND permissive-fsf AND Autoconf AND permissive-nowarranty AND GPL-2.0-only + AND none AND config-h AND LGPL-2.0-only AND LGPL-2.1-only AND noderivs AND + PD-debian AND GPL-3.0-only + name: liblzma5 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: xz-utils 5.6.1+really5.4.5-1build0.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 5.6.1+really5.4.5-1build0.1 + - SPDXID: SPDXRef-Package-e06fd94052299ed0 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libmd0@1.1.0-2build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 77f8cdbf03a43656bbf6604e18bd16834fc8bf2c949d4fbdf24ac297869b667a + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libmd0@1.1.0-2build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND BSD-3-clause-Aaron-D-Gifford AND BSD-2-Clause + AND BSD-2-Clause-NetBSD AND ISC AND Beerware AND public-domain-md4 AND public-domain-md5 + AND public-domain-sha1 + licenseDeclared: BSD-3-Clause AND BSD-3-clause-Aaron-D-Gifford AND BSD-2-Clause + AND BSD-2-Clause-NetBSD AND ISC AND Beerware AND public-domain-md4 AND public-domain-md5 + AND public-domain-sha1 + name: libmd0 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libmd 1.1.0-2build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.1.0-2build1 + - SPDXID: SPDXRef-Package-ad1c14c55e66fb5e + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libmount1@2.39.3-9ubuntu6.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libmount1@2.39.3-9ubuntu6.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + licenseDeclared: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + name: libmount1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: util-linux 2.39.3-9ubuntu6.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.39.3-9ubuntu6.1 + - SPDXID: SPDXRef-Package-6f3495bc26251921 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libncursesw6@6.4+20240113-1ubuntu2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 96d1e64bb1a80f2005f41c4112d10e4756a222a6c245e9383fc8da924bd40bf9 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libncursesw6@6.4%2B20240113-1ubuntu2?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: NOASSERTION + licenseDeclared: NOASSERTION + name: libncursesw6 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: ncurses 6.4+20240113-1ubuntu2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 6.4+20240113-1ubuntu2 + - SPDXID: SPDXRef-Package-5935e8feedb1e070 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libnettle8t64@3.9.1-2.2build1.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libnettle8t64@3.9.1-2.2build1.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later + AND LGPL-2.0-only AND MIT AND GPL-3.0-only WITH autoconf-exception+ AND public-domain + AND GPL-2.0-only AND GAP + licenseDeclared: LGPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later + AND LGPL-2.0-only AND MIT AND GPL-3.0-only WITH autoconf-exception+ AND public-domain + AND GPL-2.0-only AND GAP + name: libnettle8t64 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: nettle 3.9.1-2.2build1.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.9.1-2.2build1.1 + - SPDXID: SPDXRef-Package-636c008c37de4afd + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libnpth0t64@1.6-3.1build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: b380eca1221a9ac855427652452801c5ca9161dd69e12446d300524eba00944e + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libnpth0t64@1.6-3.1build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-or-later AND LGPL-2.1-only + licenseDeclared: LGPL-2.1-or-later AND LGPL-2.1-only + name: libnpth0t64 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: npth 1.6-3.1build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.6-3.1build1 + - SPDXID: SPDXRef-Package-3b9bda4759090668 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libp11-kit0@0.25.3-4ubuntu2.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libp11-kit0@0.25.3-4ubuntu2.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND FSFULLR AND GPL-2.0-or-later WITH Autoconf-data-exception + AND GPL-3.0-or-later WITH Autoconf-data-exception AND X11 AND ISC AND customFSFULLRWD + AND Apache-2.0 AND LGPL-2.1-or-later AND customFSFUL AND FSFAP AND LGPL-2.1-only + licenseDeclared: BSD-3-Clause AND FSFULLR AND GPL-2.0-or-later WITH Autoconf-data-exception + AND GPL-3.0-or-later WITH Autoconf-data-exception AND X11 AND ISC AND customFSFULLRWD + AND Apache-2.0 AND LGPL-2.1-or-later AND customFSFUL AND FSFAP AND LGPL-2.1-only + name: libp11-kit0 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: p11-kit 0.25.3-4ubuntu2.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 0.25.3-4ubuntu2.1 + - SPDXID: SPDXRef-Package-85ac7f0b423ef9ee + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libpam-modules@1.5.3-5ubuntu5.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libpam-modules@1.5.3-5ubuntu5.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only + AND GPL-3.0-or-later WITH Bison-exception AND BSD-tcp-wrappers AND LGPL-2.0-or-later + AND LGPL-2.0-only AND public-domain AND Beerware + licenseDeclared: BSD-3-Clause AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only + AND GPL-3.0-or-later WITH Bison-exception AND BSD-tcp-wrappers AND LGPL-2.0-or-later + AND LGPL-2.0-only AND public-domain AND Beerware + name: libpam-modules + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: pam 1.5.3-5ubuntu5.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.5.3-5ubuntu5.1 + - SPDXID: SPDXRef-Package-9a3c5261be2ea898 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libpam-modules-bin@1.5.3-5ubuntu5.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libpam-modules-bin@1.5.3-5ubuntu5.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only + AND GPL-3.0-or-later WITH Bison-exception AND BSD-tcp-wrappers AND LGPL-2.0-or-later + AND LGPL-2.0-only AND public-domain AND Beerware + licenseDeclared: BSD-3-Clause AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only + AND GPL-3.0-or-later WITH Bison-exception AND BSD-tcp-wrappers AND LGPL-2.0-or-later + AND LGPL-2.0-only AND public-domain AND Beerware + name: libpam-modules-bin + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: pam 1.5.3-5ubuntu5.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.5.3-5ubuntu5.1 + - SPDXID: SPDXRef-Package-d71feba0ceba2df8 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libpam-runtime@1.5.3-5ubuntu5.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libpam-runtime@1.5.3-5ubuntu5.1?arch=all&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only + AND GPL-3.0-or-later WITH Bison-exception AND BSD-tcp-wrappers AND LGPL-2.0-or-later + AND LGPL-2.0-only AND public-domain AND Beerware + licenseDeclared: BSD-3-Clause AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only + AND GPL-3.0-or-later WITH Bison-exception AND BSD-tcp-wrappers AND LGPL-2.0-or-later + AND LGPL-2.0-only AND public-domain AND Beerware + name: libpam-runtime + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: pam 1.5.3-5ubuntu5.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.5.3-5ubuntu5.1 + - SPDXID: SPDXRef-Package-ef30f41deecfc0d6 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libpam0g@1.5.3-5ubuntu5.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libpam0g@1.5.3-5ubuntu5.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only + AND GPL-3.0-or-later WITH Bison-exception AND BSD-tcp-wrappers AND LGPL-2.0-or-later + AND LGPL-2.0-only AND public-domain AND Beerware + licenseDeclared: BSD-3-Clause AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only + AND GPL-3.0-or-later WITH Bison-exception AND BSD-tcp-wrappers AND LGPL-2.0-or-later + AND LGPL-2.0-only AND public-domain AND Beerware + name: libpam0g + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: pam 1.5.3-5ubuntu5.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.5.3-5ubuntu5.1 + - SPDXID: SPDXRef-Package-a2fe7717ec51fcff + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libpcre2-8-0@10.42-4ubuntu2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: bb38c38adb4ef548f2851b5cf7f70bbdbcb27d582c17550aa053edb9e4098d84 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libpcre2-8-0@10.42-4ubuntu2?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-clause-Cambridge WITH BINARY-LIBRARY-LIKE-PACKAGES-exception + AND BSD-3-Clause AND X11 AND BSD-2-Clause AND public-domain + licenseDeclared: BSD-3-clause-Cambridge WITH BINARY-LIBRARY-LIKE-PACKAGES-exception + AND BSD-3-Clause AND X11 AND BSD-2-Clause AND public-domain + name: libpcre2-8-0 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: pcre2 10.42-4ubuntu2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 10.42-4ubuntu2 + - SPDXID: SPDXRef-Package-d2fa259febec092c + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libproc2-0@2:4.0.4-4ubuntu3.2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libproc2-0@4.0.4-4ubuntu3.2?arch=amd64&distro=ubuntu-24.04&epoch=2 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-or-later AND LGPL-2.0-or-later AND GPL-2.0-or-later + AND GPL-2.0-only AND LGPL-2.0-only AND LGPL-2.1-only + licenseDeclared: LGPL-2.1-or-later AND LGPL-2.0-or-later AND GPL-2.0-or-later + AND GPL-2.0-only AND LGPL-2.0-only AND LGPL-2.1-only + name: libproc2-0 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: procps 2:4.0.4-4ubuntu3.2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2:4.0.4-4ubuntu3.2 + - SPDXID: SPDXRef-Package-609b859fea15b897 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libseccomp2@2.5.5-1ubuntu3.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libseccomp2@2.5.5-1ubuntu3.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-only + licenseDeclared: LGPL-2.1-only + name: libseccomp2 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libseccomp 2.5.5-1ubuntu3.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.5.5-1ubuntu3.1 + - SPDXID: SPDXRef-Package-612746568e90d8a5 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libselinux1@3.5-2ubuntu2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: c0fe6dfac61d458f3e65c4a2bf6a920030a97d2429e33d0b405a8c4a63ef2864 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libselinux1@3.5-2ubuntu2?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: public-domain AND GPL-2.0-only + licenseDeclared: public-domain AND GPL-2.0-only + name: libselinux1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libselinux 3.5-2ubuntu2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.5-2ubuntu2 + - SPDXID: SPDXRef-Package-413fe907da5f521a + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libsemanage-common@3.5-1build5" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: e10cd93f0b6941566de04b860b723df57ca3fe4a9255a73b2be0d1dc7df2850e + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libsemanage-common@3.5-1build5?arch=all&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-or-later AND LGPL-2.1-only AND GPL-2.0-only + licenseDeclared: LGPL-2.1-or-later AND LGPL-2.1-only AND GPL-2.0-only + name: libsemanage-common + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libsemanage 3.5-1build5" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.5-1build5 + - SPDXID: SPDXRef-Package-7e47866aee8c87df + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libsemanage2@3.5-1build5" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 56102dcbd410416d03c5ffb80958f54ac63936f4d9eb3f6a98964e680a82ce37 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libsemanage2@3.5-1build5?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-or-later AND LGPL-2.1-only AND GPL-2.0-only + licenseDeclared: LGPL-2.1-or-later AND LGPL-2.1-only AND GPL-2.0-only + name: libsemanage2 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libsemanage 3.5-1build5" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.5-1build5 + - SPDXID: SPDXRef-Package-cc9a8e511894edba + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libsepol2@3.5-2build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 47272bab0c2fcc350431f9a8ae63afc49ce6d7e71e63c914639fbda6b1ca9f6a + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libsepol2@3.5-2build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-or-later AND LGPL-2.1-only AND Zlib AND GPL-2.0-only + AND GPL-2.0-or-later + licenseDeclared: LGPL-2.1-or-later AND LGPL-2.1-only AND Zlib AND GPL-2.0-only + AND GPL-2.0-or-later + name: libsepol2 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libsepol 3.5-2build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.5-2build1 + - SPDXID: SPDXRef-Package-705179e75a5938c8 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libsmartcols1@2.39.3-9ubuntu6.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libsmartcols1@2.39.3-9ubuntu6.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + licenseDeclared: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + name: libsmartcols1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: util-linux 2.39.3-9ubuntu6.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.39.3-9ubuntu6.1 + - SPDXID: SPDXRef-Package-860df08a5acd6b1d + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libss2@1.47.0-2.4~exp1ubuntu4.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libss2@1.47.0-2.4~exp1ubuntu4.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-only AND LGPL-2.0-only AND BSD-3-Clause AND Apache-2.0 + AND ISC AND GPL-2.0-or-later AND MIT-US-export AND Kazlib AND Latex2e AND + GPL-2.0-or-later WITH Texinfo-exception + licenseDeclared: GPL-2.0-only AND LGPL-2.0-only AND BSD-3-Clause AND Apache-2.0 + AND ISC AND GPL-2.0-or-later AND MIT-US-export AND Kazlib AND Latex2e AND + GPL-2.0-or-later WITH Texinfo-exception + name: libss2 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: e2fsprogs 1.47.0-2.4~exp1ubuntu4.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.47.0-2.4~exp1ubuntu4.1 + - SPDXID: SPDXRef-Package-7ee87b71b6e048ec + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libssl3t64@3.0.13-0ubuntu3.4" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libssl3t64@3.0.13-0ubuntu3.4?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: Apache-2.0 AND Artistic-2.0 AND GPL-1.0-or-later AND GPL-1.0-only + licenseDeclared: Apache-2.0 AND Artistic-2.0 AND GPL-1.0-or-later AND GPL-1.0-only + name: libssl3t64 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: openssl 3.0.13-0ubuntu3.4" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.0.13-0ubuntu3.4 + - SPDXID: SPDXRef-Package-8a1fa4f8d17778f0 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libstdc++6@14-20240412-0ubuntu1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 4863e880d6ee538e4734c430c5579c1ac933b88a42c25bc9980d0f148c54b21e + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libstdc%2B%2B6@14-20240412-0ubuntu1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: NOASSERTION + licenseDeclared: NOASSERTION + name: libstdc++6 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: gcc-14 14-20240412-0ubuntu1" + supplier: "Organization: Ubuntu Core developers " + versionInfo: 14-20240412-0ubuntu1 + - SPDXID: SPDXRef-Package-aa36f5655ae39730 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libsystemd0@255.4-1ubuntu8.4" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libsystemd0@255.4-1ubuntu8.4?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: + LGPL-2.1-or-later AND CC0-1.0 AND GPL-2.0-only WITH Linux-syscall-note-exception + AND MIT AND public-domain AND GPL-2.0-or-later AND GPL-2.0-only AND LGPL-2.1-only + licenseDeclared: + LGPL-2.1-or-later AND CC0-1.0 AND GPL-2.0-only WITH Linux-syscall-note-exception + AND MIT AND public-domain AND GPL-2.0-or-later AND GPL-2.0-only AND LGPL-2.1-only + name: libsystemd0 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: systemd 255.4-1ubuntu8.4" + supplier: "Organization: Ubuntu Developers " + versionInfo: 255.4-1ubuntu8.4 + - SPDXID: SPDXRef-Package-32251ff7259b9831 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libtasn1-6@4.19.0-3build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: e30d8b4b7769966185b5acb40ac81205467022c96d7b1688bf06a3eaded2b98c + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libtasn1-6@4.19.0-3build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.0-or-later AND LGPL-2.1-only AND GPL-3.0-only AND GFDL-1.3-only + licenseDeclared: LGPL-2.0-or-later AND LGPL-2.1-only AND GPL-3.0-only AND GFDL-1.3-only + name: libtasn1-6 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libtasn1-6 4.19.0-3build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 4.19.0-3build1 + - SPDXID: SPDXRef-Package-25bbfdbd890e7b3e + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libtinfo6@6.4+20240113-1ubuntu2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 53e1e1753729d04cf65b05e6e58abe06e2bb76cc07eff0e1b2a638a638ca209b + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libtinfo6@6.4%2B20240113-1ubuntu2?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: MIT-X11 AND X11 AND BSD-3-Clause + licenseDeclared: MIT-X11 AND X11 AND BSD-3-Clause + name: libtinfo6 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: ncurses 6.4+20240113-1ubuntu2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 6.4+20240113-1ubuntu2 + - SPDXID: SPDXRef-Package-26ef7be22f19cbf3 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libudev1@255.4-1ubuntu8.4" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libudev1@255.4-1ubuntu8.4?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: + LGPL-2.1-or-later AND CC0-1.0 AND GPL-2.0-only WITH Linux-syscall-note-exception + AND MIT AND public-domain AND GPL-2.0-or-later AND GPL-2.0-only AND LGPL-2.1-only + licenseDeclared: + LGPL-2.1-or-later AND CC0-1.0 AND GPL-2.0-only WITH Linux-syscall-note-exception + AND MIT AND public-domain AND GPL-2.0-or-later AND GPL-2.0-only AND LGPL-2.1-only + name: libudev1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: systemd 255.4-1ubuntu8.4" + supplier: "Organization: Ubuntu Developers " + versionInfo: 255.4-1ubuntu8.4 + - SPDXID: SPDXRef-Package-96b72be42eb6155d + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libunistring5@1.1-2build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 78acc4c141a499e0c1e4cc47ca8e9082996f3972662c4d92337669ecc9b0a519 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libunistring5@1.1-2build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-3.0-or-later AND GPL-2.0-or-later AND FreeSoftware AND + GPL-3.0-or-later AND GFDL-NIV-1.2+ AND GPL-2.0-or-later WITH distribution-exception + AND MIT AND X11 AND LGPL-3.0-only AND GPL-3.0-only AND GPL-2.0-only AND GFDL-1.2-only + licenseDeclared: LGPL-3.0-or-later AND GPL-2.0-or-later AND FreeSoftware AND + GPL-3.0-or-later AND GFDL-NIV-1.2+ AND GPL-2.0-or-later WITH distribution-exception + AND MIT AND X11 AND LGPL-3.0-only AND GPL-3.0-only AND GPL-2.0-only AND GFDL-1.2-only + name: libunistring5 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libunistring 1.1-2build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.1-2build1 + - SPDXID: SPDXRef-Package-19d39f103f289bb4 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libuuid1@2.39.3-9ubuntu6.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libuuid1@2.39.3-9ubuntu6.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + licenseDeclared: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + name: libuuid1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: util-linux 2.39.3-9ubuntu6.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.39.3-9ubuntu6.1 + - SPDXID: SPDXRef-Package-2c143471421b1fab + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libxxhash0@0.8.2-2build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 75de256c2d162dfc541beb69a83f025742cd13329262af9059eff3ca42a53239 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libxxhash0@0.8.2-2build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-2-Clause AND GPL-2.0-or-later AND GPL-2.0-only + licenseDeclared: BSD-2-Clause AND GPL-2.0-or-later AND GPL-2.0-only + name: libxxhash0 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: xxhash 0.8.2-2build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 0.8.2-2build1 + - SPDXID: SPDXRef-Package-30158e5ae135c96b + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: libzstd1@1.5.5+dfsg2-2build1.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/libzstd1@1.5.5%2Bdfsg2-2build1.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND GPL-2.0-only AND Zlib AND MIT + licenseDeclared: BSD-3-Clause AND GPL-2.0-only AND Zlib AND MIT + name: libzstd1 + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: libzstd 1.5.5+dfsg2-2build1.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.5.5+dfsg2-2build1.1 + - SPDXID: SPDXRef-Package-4c44d02d24a69764 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: login@1:4.13+dfsg1-4ubuntu3.2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/login@4.13%2Bdfsg1-4ubuntu3.2?arch=amd64&distro=ubuntu-24.04&epoch=1 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND GPL-1.0-only AND GPL-2.0-or-later AND public-domain + AND GPL-2.0-only + licenseDeclared: BSD-3-Clause AND GPL-1.0-only AND GPL-2.0-or-later AND public-domain + AND GPL-2.0-only + name: login + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: shadow 1:4.13+dfsg1-4ubuntu3.2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1:4.13+dfsg1-4ubuntu3.2 + - SPDXID: SPDXRef-Package-640f73460558ab80 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: logsave@1.47.0-2.4~exp1ubuntu4.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/logsave@1.47.0-2.4~exp1ubuntu4.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-only AND LGPL-2.0-only AND BSD-3-Clause AND Apache-2.0 + AND ISC AND GPL-2.0-or-later AND MIT-US-export AND Kazlib AND Latex2e AND + GPL-2.0-or-later WITH Texinfo-exception + licenseDeclared: GPL-2.0-only AND LGPL-2.0-only AND BSD-3-Clause AND Apache-2.0 + AND ISC AND GPL-2.0-or-later AND MIT-US-export AND Kazlib AND Latex2e AND + GPL-2.0-or-later WITH Texinfo-exception + name: logsave + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: e2fsprogs 1.47.0-2.4~exp1ubuntu4.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.47.0-2.4~exp1ubuntu4.1 + - SPDXID: SPDXRef-Package-69ee16a64e1af40d + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: mawk@1.3.4.20240123-1build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: dc7f7f4dad4b48f6012ea65de3198d8376604afef39f06d65ec6167740e203c9 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/mawk@1.3.4.20240123-1build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-only AND X11 AND CC-BY-3.0 + licenseDeclared: GPL-2.0-only AND X11 AND CC-BY-3.0 + name: mawk + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: mawk 1.3.4.20240123-1build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.3.4.20240123-1build1 + - SPDXID: SPDXRef-Package-86828934e034c397 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: mount@2.39.3-9ubuntu6.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/mount@2.39.3-9ubuntu6.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + licenseDeclared: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + name: mount + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: util-linux 2.39.3-9ubuntu6.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.39.3-9ubuntu6.1 + - SPDXID: SPDXRef-Package-b60179cfa8be20bc + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: ncurses-base@6.4+20240113-1ubuntu2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 56dbac135d58e580c2c9e33d5fd7c215b48091a54e1d9fa3d41f538f4acbac5f + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/ncurses-base@6.4%2B20240113-1ubuntu2?arch=all&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: MIT-X11 AND X11 AND BSD-3-Clause + licenseDeclared: MIT-X11 AND X11 AND BSD-3-Clause + name: ncurses-base + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: ncurses 6.4+20240113-1ubuntu2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 6.4+20240113-1ubuntu2 + - SPDXID: SPDXRef-Package-9898bfb03601e692 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: ncurses-bin@6.4+20240113-1ubuntu2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 1c7641df07311b5797fe1fd7e4e520202e41b38056ad71e22e2022289a6701bb + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/ncurses-bin@6.4%2B20240113-1ubuntu2?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: MIT-X11 AND X11 AND BSD-3-Clause + licenseDeclared: MIT-X11 AND X11 AND BSD-3-Clause + name: ncurses-bin + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: ncurses 6.4+20240113-1ubuntu2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 6.4+20240113-1ubuntu2 + - SPDXID: SPDXRef-Package-df05355fdcfde0c6 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: passwd@1:4.13+dfsg1-4ubuntu3.2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/passwd@4.13%2Bdfsg1-4ubuntu3.2?arch=amd64&distro=ubuntu-24.04&epoch=1 + referenceType: purl + filesAnalyzed: false + licenseConcluded: BSD-3-Clause AND GPL-1.0-only AND GPL-2.0-or-later AND public-domain + AND GPL-2.0-only + licenseDeclared: BSD-3-Clause AND GPL-1.0-only AND GPL-2.0-or-later AND public-domain + AND GPL-2.0-only + name: passwd + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: shadow 1:4.13+dfsg1-4ubuntu3.2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1:4.13+dfsg1-4ubuntu3.2 + - SPDXID: SPDXRef-Package-e1e6250f5e152fc3 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: perl-base@5.38.2-3.2build2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 82a75783b5b63b92d83c3f022e98dba9542e30d3a228b3e381d9c302b14df095 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/perl-base@5.38.2-3.2build2?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-1.0-or-later AND Artistic-2.0 AND MIT AND REGCOMP AND + GPL-2.0-only WITH bison-exception+ AND Unicode AND BZIP AND Zlib AND GPL-2.0-or-later + AND FSFAP AND BSD-3-Clause WITH weird-numbering AND CC0-1.0 AND TEXT-TABS + AND BSD-4-clause-POWERDOG AND BSD-3-clause-GENERIC AND BSD-3-Clause AND SDBM-PUBLIC-DOMAIN + AND DONT-CHANGE-THE-GPL AND Artistic-dist AND LGPL-2.1-only AND GPL-1.0-only + AND GPL-2.0-only AND Artistic-2 + licenseDeclared: GPL-1.0-or-later AND Artistic-2.0 AND MIT AND REGCOMP AND GPL-2.0-only + WITH bison-exception+ AND Unicode AND BZIP AND Zlib AND GPL-2.0-or-later AND + FSFAP AND BSD-3-Clause WITH weird-numbering AND CC0-1.0 AND TEXT-TABS AND + BSD-4-clause-POWERDOG AND BSD-3-clause-GENERIC AND BSD-3-Clause AND SDBM-PUBLIC-DOMAIN + AND DONT-CHANGE-THE-GPL AND Artistic-dist AND LGPL-2.1-only AND GPL-1.0-only + AND GPL-2.0-only AND Artistic-2 + name: perl-base + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: perl 5.38.2-3.2build2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 5.38.2-3.2build2 + - SPDXID: SPDXRef-Package-ef868bdaffbcd404 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: procps@2:4.0.4-4ubuntu3.2" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/procps@4.0.4-4ubuntu3.2?arch=amd64&distro=ubuntu-24.04&epoch=2 + referenceType: purl + filesAnalyzed: false + licenseConcluded: LGPL-2.1-or-later AND LGPL-2.0-or-later AND GPL-2.0-or-later + AND GPL-2.0-only AND LGPL-2.0-only AND LGPL-2.1-only + licenseDeclared: LGPL-2.1-or-later AND LGPL-2.0-or-later AND GPL-2.0-or-later + AND GPL-2.0-only AND LGPL-2.0-only AND LGPL-2.1-only + name: procps + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: procps 2:4.0.4-4ubuntu3.2" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2:4.0.4-4ubuntu3.2 + - SPDXID: SPDXRef-Package-a3dec6bcec444a34 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: sed@4.9-2build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: a09b856849cf36190f8cd39da33486b14bcaf81b592530b2f3236da17daaad2f + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/sed@4.9-2build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: + GPL-3.0-or-later AND GPL-3.0-only AND X11 AND GFDL-1.3-no-invariants-or-later + AND GFDL-1.3-only AND ISC AND BSD-4-Clause-UC AND BSL-1 AND pcre + licenseDeclared: + GPL-3.0-or-later AND GPL-3.0-only AND X11 AND GFDL-1.3-no-invariants-or-later + AND GFDL-1.3-only AND ISC AND BSD-4-Clause-UC AND BSL-1 AND pcre + name: sed + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: sed 4.9-2build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 4.9-2build1 + - SPDXID: SPDXRef-Package-25f18b61c67835ea + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: sensible-utils@0.0.22" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 410c29ff82c6916d14e235b511287e67a45cb78d509b19aab48608acdc941254 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/sensible-utils@0.0.22?arch=all&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND All-permissive AND configure AND installsh + AND BSD-2-Clause AND GPL-2.0-only + licenseDeclared: GPL-2.0-or-later AND All-permissive AND configure AND installsh + AND BSD-2-Clause AND GPL-2.0-only + name: sensible-utils + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: sensible-utils 0.0.22" + supplier: "Organization: Ubuntu Developers " + versionInfo: 0.0.22 + - SPDXID: SPDXRef-Package-29397200b031ed97 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: sysvinit-utils@3.08-6ubuntu3" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 03cf5c9c28a5d186fb7f5214e464f831ff28177695cbb61e66083237267a047e + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/sysvinit-utils@3.08-6ubuntu3?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND LGPL-2.1-or-later AND GPL-3.0-only AND + GPL-2.0-only AND LGPL-2.1-only + licenseDeclared: GPL-2.0-or-later AND LGPL-2.1-or-later AND GPL-3.0-only AND + GPL-2.0-only AND LGPL-2.1-only + name: sysvinit-utils + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: sysvinit 3.08-6ubuntu3" + supplier: "Organization: Ubuntu Developers " + versionInfo: 3.08-6ubuntu3 + - SPDXID: SPDXRef-Package-cfc228d904d83d41 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: tar@1.35+dfsg-3build1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 015b65ef176021c1846ec8b6152167d5d266c1949ec30ee3367e95fa2b2ead27 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/tar@1.35%2Bdfsg-3build1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-3.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later WITH + Bison-exception AND LGPL-2.1-or-later AND LGPL-2.1-only AND LGPL-3.0-or-later + AND LGPL-3.0-only AND GPL-2.0-or-later AND GPL-2.0-only + licenseDeclared: GPL-3.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later WITH + Bison-exception AND LGPL-2.1-or-later AND LGPL-2.1-only AND LGPL-3.0-or-later + AND LGPL-3.0-only AND GPL-2.0-or-later AND GPL-2.0-only + name: tar + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: tar 1.35+dfsg-3build1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1.35+dfsg-3build1 + - SPDXID: SPDXRef-Package-f8b201ea9656093b + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: ubuntu-keyring@2023.11.28.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + checksums: + - algorithm: SHA256 + checksumValue: 36de43b15853ccae0028e9a767613770c704833f82586f28eb262f0311adb8a8 + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/ubuntu-keyring@2023.11.28.1?arch=all&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later + licenseDeclared: GPL-2.0-or-later + name: ubuntu-keyring + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: ubuntu-keyring 2023.11.28.1" + supplier: "Organization: Dimitri John Ledkov " + versionInfo: 2023.11.28.1 + - SPDXID: SPDXRef-Package-b7941c8216478768 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: util-linux@2.39.3-9ubuntu6.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/util-linux@2.39.3-9ubuntu6.1?arch=amd64&distro=ubuntu-24.04 + referenceType: purl + filesAnalyzed: false + licenseConcluded: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + licenseDeclared: GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later AND + public-domain AND BSD-4-Clause AND MIT AND BSD-3-Clause AND BSLA AND LGPL-2.0-or-later + AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND GPL-3.0-only AND LGPL-2.0-only + AND LGPL-2.1-only AND LGPL-3.0-only + name: util-linux + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: util-linux 2.39.3-9ubuntu6.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 2.39.3-9ubuntu6.1 + - SPDXID: SPDXRef-Package-43c93d7f6426caa0 + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDiffID: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "LayerDigest: sha256:802008e7f7617aa11266de164e757a6c8d7bb57ed4c972cf7e9f519dd0a21708" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgID: zlib1g@1:1.3.dfsg-3.1ubuntu2.1" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "PkgType: ubuntu" + downloadLocation: NONE + externalRefs: + - referenceCategory: PACKAGE-MANAGER + referenceLocator: pkg:deb/ubuntu/zlib1g@1.3.dfsg-3.1ubuntu2.1?arch=amd64&distro=ubuntu-24.04&epoch=1 + referenceType: purl + filesAnalyzed: false + licenseConcluded: Zlib + licenseDeclared: Zlib + name: zlib1g + primaryPackagePurpose: LIBRARY + sourceInfo: "built package from: zlib 1:1.3.dfsg-3.1ubuntu2.1" + supplier: "Organization: Ubuntu Developers " + versionInfo: 1:1.3.dfsg-3.1ubuntu2.1 + - SPDXID: SPDXRef-OperatingSystem-fb77405a724ac0ee + annotations: + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "Class: os-pkgs" + - annotationDate: "2024-11-15T16:02:50Z" + annotationType: OTHER + annotator: "Tool: trivy-dev" + comment: "Type: ubuntu" + downloadLocation: NONE + filesAnalyzed: false + name: ubuntu + primaryPackagePurpose: OPERATING-SYSTEM + versionInfo: "24.04" + relationships: + - relatedSpdxElement: SPDXRef-OperatingSystem-fb77405a724ac0ee + relationshipType: CONTAINS + spdxElementId: SPDXRef-ContainerImage-6a7c9b66d6ae91e4 + - relatedSpdxElement: SPDXRef-ContainerImage-6a7c9b66d6ae91e4 + relationshipType: DESCRIBES + spdxElementId: SPDXRef-DOCUMENT + - relatedSpdxElement: SPDXRef-Package-155ccf6e4743dd21 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-19d39f103f289bb4 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-23f5b7d2ab5551da + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-25bbfdbd890e7b3e + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-25f18b61c67835ea + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-26ef7be22f19cbf3 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-29397200b031ed97 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-2a455139afa28343 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-2c143471421b1fab + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-2c8cc9b9c082272d + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-2ed5f6aa913ae7f9 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-30158e5ae135c96b + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-31f64c62365a2552 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-32251ff7259b9831 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-34b46b102ce27e5f + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-378d3a10b22f634c + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-3b9bda4759090668 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-3d5477f483d7c3f6 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-413fe907da5f521a + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-43070f7a4cc6adc6 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-4360c8e5fdcd2831 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-43c93d7f6426caa0 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-4c44d02d24a69764 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-4e4e0862757a85f3 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-56d6044cdac6e48b + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-5935e8feedb1e070 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-5c17e63a57047a3f + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-609b859fea15b897 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-60f18dc8dbb86bfe + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-612746568e90d8a5 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-636c008c37de4afd + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-64053bc84ca7ff71 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-640f73460558ab80 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-667d6307ee408b7d + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-69503b0842716bf3 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-69ee16a64e1af40d + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-6a34e62debac6a04 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-6f3495bc26251921 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-705179e75a5938c8 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-7212a37577a28b61 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-766a9b398538bb9e + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-7e47866aee8c87df + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-7ee87b71b6e048ec + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-801f1b60720011d1 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-8253cad11eb81144 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-85ac7f0b423ef9ee + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-860df08a5acd6b1d + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-86828934e034c397 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-8a1fa4f8d17778f0 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-8c4979b9660231a9 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-91915b4b24baa5c6 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-9322059e7cdf64cc + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-948030578d3a65ea + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-966545d05f814cb5 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-9684164e42b51fa6 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-96b72be42eb6155d + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-97c7d45dc448824f + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-9898bfb03601e692 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-9a3c5261be2ea898 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-a2fe7717ec51fcff + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-a3dec6bcec444a34 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-a9089025225e0aec + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-a9dd59790c53adcc + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-aa36f5655ae39730 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-ac6533704ac2d874 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-ad1c14c55e66fb5e + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-b438afbb88ee4714 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-b60179cfa8be20bc + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-b7941c8216478768 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-c163e44328178d7a + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-c4479c9fb06de154 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-c4c0615eae38e5e + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-c5252d543d426624 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-ca8b4da9184dc4dc + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-cc9a8e511894edba + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-cee99b0b13fe911a + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-cfc228d904d83d41 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-d21171b896631d29 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-d2fa259febec092c + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-d71feba0ceba2df8 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-df05355fdcfde0c6 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-e03159ca65250b60 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-e06fd94052299ed0 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-e1e6250f5e152fc3 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-e960f5881a80a60e + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-eb64eb8d23b18c9c + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-ef30f41deecfc0d6 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-ef868bdaffbcd404 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-f43f220427100476 + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-f8b201ea9656093b + relationshipType: CONTAINS + spdxElementId: SPDXRef-OperatingSystem-fb77405a724ac0ee + - relatedSpdxElement: SPDXRef-Package-56d6044cdac6e48b + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-155ccf6e4743dd21 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-155ccf6e4743dd21 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-19d39f103f289bb4 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-23f5b7d2ab5551da + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-25bbfdbd890e7b3e + - relatedSpdxElement: SPDXRef-Package-69503b0842716bf3 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-26ef7be22f19cbf3 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-26ef7be22f19cbf3 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-29397200b031ed97 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-2c143471421b1fab + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-2c8cc9b9c082272d + - relatedSpdxElement: SPDXRef-Package-56d6044cdac6e48b + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-2ed5f6aa913ae7f9 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-2ed5f6aa913ae7f9 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-30158e5ae135c96b + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-32251ff7259b9831 + - relatedSpdxElement: SPDXRef-Package-91915b4b24baa5c6 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-378d3a10b22f634c + - relatedSpdxElement: SPDXRef-Package-a9089025225e0aec + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-3b9bda4759090668 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-3b9bda4759090668 + - relatedSpdxElement: SPDXRef-Package-801f1b60720011d1 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-3d5477f483d7c3f6 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-3d5477f483d7c3f6 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-43070f7a4cc6adc6 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-43c93d7f6426caa0 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-56d6044cdac6e48b + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-5935e8feedb1e070 + - relatedSpdxElement: SPDXRef-Package-5935e8feedb1e070 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-5c17e63a57047a3f + - relatedSpdxElement: SPDXRef-Package-ca8b4da9184dc4dc + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-5c17e63a57047a3f + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-5c17e63a57047a3f + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-609b859fea15b897 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-60f18dc8dbb86bfe + - relatedSpdxElement: SPDXRef-Package-a2fe7717ec51fcff + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-612746568e90d8a5 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-612746568e90d8a5 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-636c008c37de4afd + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-64053bc84ca7ff71 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-640f73460558ab80 + - relatedSpdxElement: SPDXRef-Package-34b46b102ce27e5f + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-667d6307ee408b7d + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-667d6307ee408b7d + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-69503b0842716bf3 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-69ee16a64e1af40d + - relatedSpdxElement: SPDXRef-Package-32251ff7259b9831 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-6a34e62debac6a04 + - relatedSpdxElement: SPDXRef-Package-3b9bda4759090668 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-6a34e62debac6a04 + - relatedSpdxElement: SPDXRef-Package-5935e8feedb1e070 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-6a34e62debac6a04 + - relatedSpdxElement: SPDXRef-Package-5c17e63a57047a3f + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-6a34e62debac6a04 + - relatedSpdxElement: SPDXRef-Package-96b72be42eb6155d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-6a34e62debac6a04 + - relatedSpdxElement: SPDXRef-Package-c4c0615eae38e5e + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-6a34e62debac6a04 + - relatedSpdxElement: SPDXRef-Package-ca8b4da9184dc4dc + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-6a34e62debac6a04 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-6a34e62debac6a04 + - relatedSpdxElement: SPDXRef-Package-25bbfdbd890e7b3e + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-6f3495bc26251921 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-6f3495bc26251921 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-705179e75a5938c8 + - relatedSpdxElement: SPDXRef-Package-155ccf6e4743dd21 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7212a37577a28b61 + - relatedSpdxElement: SPDXRef-Package-2ed5f6aa913ae7f9 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7212a37577a28b61 + - relatedSpdxElement: SPDXRef-Package-43c93d7f6426caa0 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7212a37577a28b61 + - relatedSpdxElement: SPDXRef-Package-56d6044cdac6e48b + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7212a37577a28b61 + - relatedSpdxElement: SPDXRef-Package-636c008c37de4afd + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7212a37577a28b61 + - relatedSpdxElement: SPDXRef-Package-b438afbb88ee4714 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7212a37577a28b61 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7212a37577a28b61 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-766a9b398538bb9e + - relatedSpdxElement: SPDXRef-Package-413fe907da5f521a + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7e47866aee8c87df + - relatedSpdxElement: SPDXRef-Package-612746568e90d8a5 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7e47866aee8c87df + - relatedSpdxElement: SPDXRef-Package-b438afbb88ee4714 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7e47866aee8c87df + - relatedSpdxElement: SPDXRef-Package-cc9a8e511894edba + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7e47866aee8c87df + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7e47866aee8c87df + - relatedSpdxElement: SPDXRef-Package-eb64eb8d23b18c9c + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7e47866aee8c87df + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-7ee87b71b6e048ec + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-801f1b60720011d1 + - relatedSpdxElement: SPDXRef-Package-640f73460558ab80 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-8253cad11eb81144 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-860df08a5acd6b1d + - relatedSpdxElement: SPDXRef-Package-f43f220427100476 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-860df08a5acd6b1d + - relatedSpdxElement: SPDXRef-Package-34b46b102ce27e5f + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-8a1fa4f8d17778f0 + - relatedSpdxElement: SPDXRef-Package-667d6307ee408b7d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-8a1fa4f8d17778f0 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-8a1fa4f8d17778f0 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-8c4979b9660231a9 + - relatedSpdxElement: SPDXRef-Package-cfc228d904d83d41 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-91915b4b24baa5c6 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-9322059e7cdf64cc + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-966545d05f814cb5 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-96b72be42eb6155d + - relatedSpdxElement: SPDXRef-Package-612746568e90d8a5 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-9a3c5261be2ea898 + - relatedSpdxElement: SPDXRef-Package-801f1b60720011d1 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-9a3c5261be2ea898 + - relatedSpdxElement: SPDXRef-Package-aa36f5655ae39730 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-9a3c5261be2ea898 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-9a3c5261be2ea898 + - relatedSpdxElement: SPDXRef-Package-eb64eb8d23b18c9c + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-9a3c5261be2ea898 + - relatedSpdxElement: SPDXRef-Package-ef30f41deecfc0d6 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-9a3c5261be2ea898 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-a2fe7717ec51fcff + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-a9089025225e0aec + - relatedSpdxElement: SPDXRef-Package-609b859fea15b897 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-a9dd59790c53adcc + - relatedSpdxElement: SPDXRef-Package-667d6307ee408b7d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-a9dd59790c53adcc + - relatedSpdxElement: SPDXRef-Package-6a34e62debac6a04 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-a9dd59790c53adcc + - relatedSpdxElement: SPDXRef-Package-7212a37577a28b61 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-a9dd59790c53adcc + - relatedSpdxElement: SPDXRef-Package-8a1fa4f8d17778f0 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-a9dd59790c53adcc + - relatedSpdxElement: SPDXRef-Package-aa36f5655ae39730 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-a9dd59790c53adcc + - relatedSpdxElement: SPDXRef-Package-c4479c9fb06de154 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-a9dd59790c53adcc + - relatedSpdxElement: SPDXRef-Package-e960f5881a80a60e + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-a9dd59790c53adcc + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-a9dd59790c53adcc + - relatedSpdxElement: SPDXRef-Package-f8b201ea9656093b + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-a9dd59790c53adcc + - relatedSpdxElement: SPDXRef-Package-155ccf6e4743dd21 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-aa36f5655ae39730 + - relatedSpdxElement: SPDXRef-Package-30158e5ae135c96b + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-aa36f5655ae39730 + - relatedSpdxElement: SPDXRef-Package-60f18dc8dbb86bfe + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-aa36f5655ae39730 + - relatedSpdxElement: SPDXRef-Package-69503b0842716bf3 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-aa36f5655ae39730 + - relatedSpdxElement: SPDXRef-Package-966545d05f814cb5 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-aa36f5655ae39730 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-aa36f5655ae39730 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ac6533704ac2d874 + - relatedSpdxElement: SPDXRef-Package-612746568e90d8a5 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ad1c14c55e66fb5e + - relatedSpdxElement: SPDXRef-Package-64053bc84ca7ff71 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ad1c14c55e66fb5e + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ad1c14c55e66fb5e + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-b438afbb88ee4714 + - relatedSpdxElement: SPDXRef-Package-155ccf6e4743dd21 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4479c9fb06de154 + - relatedSpdxElement: SPDXRef-Package-26ef7be22f19cbf3 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4479c9fb06de154 + - relatedSpdxElement: SPDXRef-Package-2c143471421b1fab + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4479c9fb06de154 + - relatedSpdxElement: SPDXRef-Package-30158e5ae135c96b + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4479c9fb06de154 + - relatedSpdxElement: SPDXRef-Package-43c93d7f6426caa0 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4479c9fb06de154 + - relatedSpdxElement: SPDXRef-Package-60f18dc8dbb86bfe + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4479c9fb06de154 + - relatedSpdxElement: SPDXRef-Package-667d6307ee408b7d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4479c9fb06de154 + - relatedSpdxElement: SPDXRef-Package-8a1fa4f8d17778f0 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4479c9fb06de154 + - relatedSpdxElement: SPDXRef-Package-966545d05f814cb5 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4479c9fb06de154 + - relatedSpdxElement: SPDXRef-Package-aa36f5655ae39730 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4479c9fb06de154 + - relatedSpdxElement: SPDXRef-Package-b438afbb88ee4714 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4479c9fb06de154 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4479c9fb06de154 + - relatedSpdxElement: SPDXRef-Package-96b72be42eb6155d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4c0615eae38e5e + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-c4c0615eae38e5e + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ca8b4da9184dc4dc + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-cc9a8e511894edba + - relatedSpdxElement: SPDXRef-Package-3d5477f483d7c3f6 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-cee99b0b13fe911a + - relatedSpdxElement: SPDXRef-Package-9684164e42b51fa6 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-cee99b0b13fe911a + - relatedSpdxElement: SPDXRef-Package-aa36f5655ae39730 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-d2fa259febec092c + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-d2fa259febec092c + - relatedSpdxElement: SPDXRef-Package-85ac7f0b423ef9ee + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-d71feba0ceba2df8 + - relatedSpdxElement: SPDXRef-Package-c163e44328178d7a + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-d71feba0ceba2df8 + - relatedSpdxElement: SPDXRef-Package-612746568e90d8a5 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-df05355fdcfde0c6 + - relatedSpdxElement: SPDXRef-Package-7e47866aee8c87df + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-df05355fdcfde0c6 + - relatedSpdxElement: SPDXRef-Package-801f1b60720011d1 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-df05355fdcfde0c6 + - relatedSpdxElement: SPDXRef-Package-85ac7f0b423ef9ee + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-df05355fdcfde0c6 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-df05355fdcfde0c6 + - relatedSpdxElement: SPDXRef-Package-eb64eb8d23b18c9c + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-df05355fdcfde0c6 + - relatedSpdxElement: SPDXRef-Package-ef30f41deecfc0d6 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-df05355fdcfde0c6 + - relatedSpdxElement: SPDXRef-Package-91915b4b24baa5c6 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-e03159ca65250b60 + - relatedSpdxElement: SPDXRef-Package-9684164e42b51fa6 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-e03159ca65250b60 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-e06fd94052299ed0 + - relatedSpdxElement: SPDXRef-Package-612746568e90d8a5 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-e960f5881a80a60e + - relatedSpdxElement: SPDXRef-Package-8c4979b9660231a9 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-e960f5881a80a60e + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-e960f5881a80a60e + - relatedSpdxElement: SPDXRef-Package-667d6307ee408b7d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-e9c79ebe32be8b8d + - relatedSpdxElement: SPDXRef-Package-2a455139afa28343 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-eb64eb8d23b18c9c + - relatedSpdxElement: SPDXRef-Package-43070f7a4cc6adc6 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-eb64eb8d23b18c9c + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-eb64eb8d23b18c9c + - relatedSpdxElement: SPDXRef-Package-c163e44328178d7a + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ef30f41deecfc0d6 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ef30f41deecfc0d6 + - relatedSpdxElement: SPDXRef-Package-eb64eb8d23b18c9c + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ef30f41deecfc0d6 + - relatedSpdxElement: SPDXRef-Package-25bbfdbd890e7b3e + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ef868bdaffbcd404 + - relatedSpdxElement: SPDXRef-Package-31f64c62365a2552 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ef868bdaffbcd404 + - relatedSpdxElement: SPDXRef-Package-6f3495bc26251921 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ef868bdaffbcd404 + - relatedSpdxElement: SPDXRef-Package-aa36f5655ae39730 + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ef868bdaffbcd404 + - relatedSpdxElement: SPDXRef-Package-d2fa259febec092c + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ef868bdaffbcd404 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-ef868bdaffbcd404 + - relatedSpdxElement: SPDXRef-Package-e9c79ebe32be8b8d + relationshipType: DEPENDS_ON + spdxElementId: SPDXRef-Package-f43f220427100476 + spdxVersion: SPDX-2.3 +status: {} diff --git a/examples/scanresult.yaml b/examples/scanresult.yaml deleted file mode 100644 index c6fd51f..0000000 --- a/examples/scanresult.yaml +++ /dev/null @@ -1,8 +0,0 @@ -apiVersion: storage.sbombastic.rancher.io/v1alpha1 -kind: ScanResult -metadata: - name: my-first-scanresult - labels: - sample-label: "true" -spec: - foo: bar diff --git a/examples/vulnerabilityreport.yaml b/examples/vulnerabilityreport.yaml new file mode 100644 index 0000000..7cbe102 --- /dev/null +++ b/examples/vulnerabilityreport.yaml @@ -0,0 +1,309 @@ +apiVersion: storage.sbombastic.rancher.io/v1alpha1 +kind: VulnerabilityReport +metadata: + creationTimestamp: "2024-11-15T16:02:54Z" + name: 82df15a51db0bb0182ee86c6d084c43d1c2731e36c68900ee59c88747dd4af10 + namespace: default + resourceVersion: "1" + uid: 946d1a07-7775-4824-a656-a74e5255225f +spec: + imageMetadata: + digest: sha256:6169c4bcc1982095067d85edf58fdcc3bd8505aef728610c5b728f3cf1cec46b + platform: linux/amd64 + registry: my-first-registry + registryURI: docker-registry.default.svc.cluster.local + repository: ubuntu + tag: latest + sarif: + $schema: https://raw.githubusercontent.com/oasis-tcs/sarif-spec/main/sarif-2.1/schema/sarif-schema-2.1.0.json + runs: + - columnKind: utf16CodeUnits + originalUriBaseIds: + ROOTPATH: + uri: file:/// + results: + - level: note + locations: + - message: + text: "/var/run/worker/trivy.sbom.2903938134.json: coreutils@9.4-3ubuntu6" + physicalLocation: + artifactLocation: + uri: /var/run/worker/trivy.sbom.2903938134.json + uriBaseId: ROOTPATH + region: + endColumn: 1 + endLine: 1 + startColumn: 1 + startLine: 1 + message: + text: "Package: coreutils\nInstalled Version: 9.4-3ubuntu6\nVulnerability + CVE-2016-2781\nSeverity: LOW\nFixed Version: \nLink: [CVE-2016-2781](https://avd.aquasec.com/nvd/cve-2016-2781)" + ruleId: CVE-2016-2781 + ruleIndex: 0 + - level: note + locations: + - message: + text: "/var/run/worker/trivy.sbom.2903938134.json: gpgv@2.4.4-2ubuntu17" + physicalLocation: + artifactLocation: + uri: /var/run/worker/trivy.sbom.2903938134.json + uriBaseId: ROOTPATH + region: + endColumn: 1 + endLine: 1 + startColumn: 1 + startLine: 1 + message: + text: "Package: gpgv\nInstalled Version: 2.4.4-2ubuntu17\nVulnerability + CVE-2022-3219\nSeverity: LOW\nFixed Version: \nLink: [CVE-2022-3219](https://avd.aquasec.com/nvd/cve-2022-3219)" + ruleId: CVE-2022-3219 + ruleIndex: 1 + - level: note + locations: + - message: + text: "/var/run/worker/trivy.sbom.2903938134.json: libc-bin@2.39-0ubuntu8.3" + physicalLocation: + artifactLocation: + uri: /var/run/worker/trivy.sbom.2903938134.json + uriBaseId: ROOTPATH + region: + endColumn: 1 + endLine: 1 + startColumn: 1 + startLine: 1 + message: + text: "Package: libc-bin\nInstalled Version: 2.39-0ubuntu8.3\nVulnerability + CVE-2016-20013\nSeverity: LOW\nFixed Version: \nLink: [CVE-2016-20013](https://avd.aquasec.com/nvd/cve-2016-20013)" + ruleId: CVE-2016-20013 + ruleIndex: 2 + - level: note + locations: + - message: + text: "/var/run/worker/trivy.sbom.2903938134.json: libc6@2.39-0ubuntu8.3" + physicalLocation: + artifactLocation: + uri: /var/run/worker/trivy.sbom.2903938134.json + uriBaseId: ROOTPATH + region: + endColumn: 1 + endLine: 1 + startColumn: 1 + startLine: 1 + message: + text: "Package: libc6\nInstalled Version: 2.39-0ubuntu8.3\nVulnerability + CVE-2016-20013\nSeverity: LOW\nFixed Version: \nLink: [CVE-2016-20013](https://avd.aquasec.com/nvd/cve-2016-20013)" + ruleId: CVE-2016-20013 + ruleIndex: 2 + - level: warning + locations: + - message: + text: "/var/run/worker/trivy.sbom.2903938134.json: libgcrypt20@1.10.3-2build1" + physicalLocation: + artifactLocation: + uri: /var/run/worker/trivy.sbom.2903938134.json + uriBaseId: ROOTPATH + region: + endColumn: 1 + endLine: 1 + startColumn: 1 + startLine: 1 + message: + text: "Package: libgcrypt20\nInstalled Version: 1.10.3-2build1\nVulnerability + CVE-2024-2236\nSeverity: MEDIUM\nFixed Version: \nLink: [CVE-2024-2236](https://avd.aquasec.com/nvd/cve-2024-2236)" + ruleId: CVE-2024-2236 + ruleIndex: 3 + - level: note + locations: + - message: + text: "/var/run/worker/trivy.sbom.2903938134.json: libssl3t64@3.0.13-0ubuntu3.4" + physicalLocation: + artifactLocation: + uri: /var/run/worker/trivy.sbom.2903938134.json + uriBaseId: ROOTPATH + region: + endColumn: 1 + endLine: 1 + startColumn: 1 + startLine: 1 + message: + text: "Package: libssl3t64\nInstalled Version: 3.0.13-0ubuntu3.4\nVulnerability + CVE-2024-41996\nSeverity: LOW\nFixed Version: \nLink: [CVE-2024-41996](https://avd.aquasec.com/nvd/cve-2024-41996)" + ruleId: CVE-2024-41996 + ruleIndex: 4 + tool: + driver: + fullName: Trivy Vulnerability Scanner + informationUri: https://github.com/aquasecurity/trivy + name: Trivy + rules: + - defaultConfiguration: + level: note + fullDescription: + text: chroot in GNU coreutils, when used with --userspec, allows local + users to escape to the parent session via a crafted TIOCSTI ioctl + call, which pushes characters to the terminal's input buffer. + help: + markdown: |- + **Vulnerability CVE-2016-2781** + | Severity | Package | Fixed Version | Link | + | --- | --- | --- | --- | + |LOW|coreutils||[CVE-2016-2781](https://avd.aquasec.com/nvd/cve-2016-2781)| + + chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. + text: "Vulnerability CVE-2016-2781\nSeverity: LOW\nPackage: coreutils\nFixed + Version: \nLink: [CVE-2016-2781](https://avd.aquasec.com/nvd/cve-2016-2781)\nchroot + in GNU coreutils, when used with --userspec, allows local users to + escape to the parent session via a crafted TIOCSTI ioctl call, which + pushes characters to the terminal's input buffer." + helpUri: https://avd.aquasec.com/nvd/cve-2016-2781 + id: CVE-2016-2781 + name: OsPackageVulnerability + properties: + precision: very-high + security-severity: "2.0" + tags: + - vulnerability + - security + - LOW + shortDescription: + text: "coreutils: Non-privileged session can escape to the parent session + in chroot" + - defaultConfiguration: + level: note + fullDescription: + text: GnuPG can be made to spin on a relatively small input by (for + example) crafting a public key with thousands of signatures attached, + compressed down to just a few KB. + help: + markdown: |- + **Vulnerability CVE-2022-3219** + | Severity | Package | Fixed Version | Link | + | --- | --- | --- | --- | + |LOW|gpgv||[CVE-2022-3219](https://avd.aquasec.com/nvd/cve-2022-3219)| + + GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB. + text: "Vulnerability CVE-2022-3219\nSeverity: LOW\nPackage: gpgv\nFixed + Version: \nLink: [CVE-2022-3219](https://avd.aquasec.com/nvd/cve-2022-3219)\nGnuPG + can be made to spin on a relatively small input by (for example) crafting + a public key with thousands of signatures attached, compressed down + to just a few KB." + helpUri: https://avd.aquasec.com/nvd/cve-2022-3219 + id: CVE-2022-3219 + name: OsPackageVulnerability + properties: + precision: very-high + security-severity: "2.0" + tags: + - vulnerability + - security + - LOW + shortDescription: + text: "gnupg: denial of service issue (resource consumption) using compressed + packets" + - defaultConfiguration: + level: note + fullDescription: + text: sha256crypt and sha512crypt through 0.6 allow attackers to cause + a denial of service (CPU consumption) because the algorithm's + runtime is proportional to the square of the length of the password. + help: + markdown: |- + **Vulnerability CVE-2016-20013** + | Severity | Package | Fixed Version | Link | + | --- | --- | --- | --- | + |LOW|libc6||[CVE-2016-20013](https://avd.aquasec.com/nvd/cve-2016-20013)| + + sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because the algorithm's runtime is proportional to the square of the length of the password. + text: "Vulnerability CVE-2016-20013\nSeverity: LOW\nPackage: libc6\nFixed + Version: \nLink: [CVE-2016-20013](https://avd.aquasec.com/nvd/cve-2016-20013)\nsha256crypt + and sha512crypt through 0.6 allow attackers to cause a denial of service + (CPU consumption) because the algorithm's runtime is proportional + to the square of the length of the password." + helpUri: https://avd.aquasec.com/nvd/cve-2016-20013 + id: CVE-2016-20013 + name: OsPackageVulnerability + properties: + precision: very-high + security-severity: "2.0" + tags: + - vulnerability + - security + - LOW + shortDescription: + text: "" + - defaultConfiguration: + level: warning + fullDescription: + text: A timing-based side-channel flaw was found in libgcrypt's + RSA implementation. This issue may allow a remote attacker to initiate + a Bleichenbacher-style attack, which can lead to the decryption of + RSA ciphertexts. + help: + markdown: |- + **Vulnerability CVE-2024-2236** + | Severity | Package | Fixed Version | Link | + | --- | --- | --- | --- | + |MEDIUM|libgcrypt20||[CVE-2024-2236](https://avd.aquasec.com/nvd/cve-2024-2236)| + + A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts. + text: "Vulnerability CVE-2024-2236\nSeverity: MEDIUM\nPackage: libgcrypt20\nFixed + Version: \nLink: [CVE-2024-2236](https://avd.aquasec.com/nvd/cve-2024-2236)\nA + timing-based side-channel flaw was found in libgcrypt's RSA implementation. + This issue may allow a remote attacker to initiate a Bleichenbacher-style + attack, which can lead to the decryption of RSA ciphertexts." + helpUri: https://avd.aquasec.com/nvd/cve-2024-2236 + id: CVE-2024-2236 + name: OsPackageVulnerability + properties: + precision: very-high + security-severity: "5.5" + tags: + - vulnerability + - security + - MEDIUM + shortDescription: + text: "libgcrypt: vulnerable to Marvin Attack" + - defaultConfiguration: + level: note + fullDescription: + text: Validating the order of the public keys in the Diffie-Hellman + Key Agreement Protocol, when an approved safe prime is used, allows + remote attackers (from the client side) to trigger unnecessarily expensive + server-side DHE modular-exponentiation calculations. The client may + cause asymmetric resource consumption. The basic attack scenario is + that the client must claim that it can only communicate with DHE, + and the server must be configured to allow DHE and validate the order + of the public key. + help: + markdown: |- + **Vulnerability CVE-2024-41996** + | Severity | Package | Fixed Version | Link | + | --- | --- | --- | --- | + |LOW|libssl3t64||[CVE-2024-41996](https://avd.aquasec.com/nvd/cve-2024-41996)| + + Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key. + text: "Vulnerability CVE-2024-41996\nSeverity: LOW\nPackage: libssl3t64\nFixed + Version: \nLink: [CVE-2024-41996](https://avd.aquasec.com/nvd/cve-2024-41996)\nValidating + the order of the public keys in the Diffie-Hellman Key Agreement Protocol, + when an approved safe prime is used, allows remote attackers (from + the client side) to trigger unnecessarily expensive server-side DHE + modular-exponentiation calculations. The client may cause asymmetric + resource consumption. The basic attack scenario is that the client + must claim that it can only communicate with DHE, and the server must + be configured to allow DHE and validate the order of the public key." + helpUri: https://avd.aquasec.com/nvd/cve-2024-41996 + id: CVE-2024-41996 + name: OsPackageVulnerability + properties: + precision: very-high + security-severity: "2.0" + tags: + - vulnerability + - security + - LOW + shortDescription: + text: "openssl: remote attackers (from the client side) to trigger unnecessarily + expensive server-side DHE modular-exponentiation calculations" + version: dev + version: 2.1.0 +status: {}