Skip to content

Instantly share code, notes, and snippets.

@bureado
Last active June 25, 2021 23:30
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
Star You must be signed in to star a gist
Save bureado/332dee67a368a377c23c29911145edbf to your computer and use it in GitHub Desktop.
## Document Header
SPDXVersion: SPDX-2.1
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: DEMO-APT-SBOM-v2
DocumentNamespace: https://foo.bar
Creator: Person: bureado
Created: 2021-06-25T19:00:00Z
CreatorComment: <text>See https://gist.github.com/bureado/29e5da5fbf30fcb9bdde83d6c8f6d1b8</text>
## 2.4 Primary Component (described by the SBOM)
PackageName: Debian GNU/Linux 10 (buster)
SPDXID: SPDXRef-docker-debian-latest-4a7a1f401734
PackageComment: <text>This is a Debian GNU/Linux 10 (buster) container running Debian 10.9, obtained from "docker.io/library/debian@sha256:acf7795dc91df17e10effee064bd229580a9c34213b4dba578d64768af5d8c51"</text>
ExternalRef: PACKAGE-MANAGER purl pkg:docker/debian@acf7795dc91df17e10effee064bd229580a9c34213b4dba578d64768af5d8c51
PackageVersion: acf7795dc91df17e10effee064bd229580a9c34213b4dba578d64768af5d8c51
PackageSupplier: Organization: Debian
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-docker-debian-latest-4a7a1f401734
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS NONE
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: adduser
SPDXID: SPDXRef-adduser
PackageComment: <text>PURL is pkg:deb/debian/adduser@3.118?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/adduser@3.118?arch=all
PackageVersion: 3.118
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-adduser
Relationship: SPDXRef-adduser CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: bd71dd1ab8dcd6005390708f23741d07f1913877affb7604dfd55f85d009aa2b
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: apt
SPDXID: SPDXRef-apt
PackageComment: <text>PURL is pkg:deb/debian/apt@1.8.2.3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/apt@1.8.2.3?arch=amd64
PackageVersion: 1.8.2.3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-apt
Relationship: SPDXRef-apt CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPLv2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 89d691610de7c717abffd2f85932f8e48da71212a1e2e05681855f1f99d1c4f9
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: base-files
SPDXID: SPDXRef-base-files
PackageComment: <text>PURL is pkg:deb/debian/base-files@10.3+deb10u9?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/base-files@10.3+deb10u9?arch=amd64
PackageVersion: 10.3+deb10u9
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-base-files
Relationship: SPDXRef-base-files CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: a01220a67b386188e412100adcf986d5ad7c5f2d4a04b77f0b85bcafdd1009a1
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: base-passwd
SPDXID: SPDXRef-base-passwd
PackageComment: <text>PURL is pkg:deb/debian/base-passwd@3.5.46?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/base-passwd@3.5.46?arch=amd64
PackageVersion: 3.5.46
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-base-passwd
Relationship: SPDXRef-base-passwd CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 PD GPL-2 GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 2d109edc0719199b6fc1c00ce3ea3fd65e4ae22a591b21f45f299e15b6e84b17
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: bash
SPDXID: SPDXRef-bash
PackageComment: <text>PURL is pkg:deb/debian/bash@5.0-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/bash@5.0-4?arch=amd64
PackageVersion: 5.0-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-bash
Relationship: SPDXRef-bash CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: d07f3528c615545bb182269362926bc171adab565dade3e8c35cb3bae8ad9e5e
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: bsdutils
SPDXID: SPDXRef-bsdutils
PackageComment: <text>PURL is pkg:deb/debian/bsdutils@1:2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/bsdutils@1:2.33.1-0.1?arch=amd64
PackageVersion: 1:2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-bsdutils
Relationship: SPDXRef-bsdutils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 304923c85c084df531443e142b9505e387c6eaf96b5a5b167a43374073052ba3
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: coreutils
SPDXID: SPDXRef-coreutils
PackageComment: <text>PURL is pkg:deb/debian/coreutils@8.30-3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/coreutils@8.30-3?arch=amd64
PackageVersion: 8.30-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-coreutils
Relationship: SPDXRef-coreutils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: ae6e5cd6e9aaf74d66edded3931a7a6c916625b8b890379189c75574f6856bf4
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: dash
SPDXID: SPDXRef-dash
PackageComment: <text>PURL is pkg:deb/debian/dash@0.5.10.2-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/dash@0.5.10.2-5?arch=amd64
PackageVersion: 0.5.10.2-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-dash
Relationship: SPDXRef-dash CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: e4872d9f258e76665317c94c637b4270dc1c15c9cf42da90dbfde0225c7f4564
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: debconf
SPDXID: SPDXRef-debconf
PackageComment: <text>PURL is pkg:deb/debian/debconf@1.5.71?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/debconf@1.5.71?arch=all
PackageVersion: 1.5.71
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-debconf
Relationship: SPDXRef-debconf CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 27a3138139b8cce80a814db942688413d94c8f538651a9944d616962a8f71fae
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: debian-archive-keyring
SPDXID: SPDXRef-debian-archive-keyring
PackageComment: <text>PURL is pkg:deb/debian/debian-archive-keyring@2019.1+deb10u1?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/debian-archive-keyring@2019.1+deb10u1?arch=all
PackageVersion: 2019.1+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-debian-archive-keyring
Relationship: SPDXRef-debian-archive-keyring CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 54f799da5506e144f1ab1563a45c6914c58850b2c9d5ac5f4800d5a39f84dc9e
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: debianutils
SPDXID: SPDXRef-debianutils
PackageComment: <text>PURL is pkg:deb/debian/debianutils@4.8.6.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/debianutils@4.8.6.1?arch=amd64
PackageVersion: 4.8.6.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-debianutils
Relationship: SPDXRef-debianutils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: a61f69765e0871d1d9c1f9915d0c7fbd2d5365d02f2fe99039f3dff64fd527e9
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: diffutils
SPDXID: SPDXRef-diffutils
PackageComment: <text>PURL is pkg:deb/debian/diffutils@1:3.7-3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/diffutils@1:3.7-3?arch=amd64
PackageVersion: 1:3.7-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-diffutils
Relationship: SPDXRef-diffutils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: f3b681c0d66a0dae75d188b3e294c1301b33189841fd6a1155b6d28048726770
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: dpkg
SPDXID: SPDXRef-dpkg
PackageComment: <text>PURL is pkg:deb/debian/dpkg@1.19.7?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/dpkg@1.19.7?arch=amd64
PackageVersion: 1.19.7
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-dpkg
Relationship: SPDXRef-dpkg CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2+ GPL-2 BSD-2-clause public-domain-s-s-d public-domain-md5 GPL-2+ GPL-2 BSD-2-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 4eaa78124b0a5495fd06afefc79f7c96a7f7795c6b6a45349ac4173b0c9b7362
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: e2fsprogs
SPDXID: SPDXRef-e2fsprogs
PackageComment: <text>PURL is pkg:deb/debian/e2fsprogs@1.44.5-1+deb10u3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/e2fsprogs@1.44.5-1+deb10u3?arch=amd64
PackageVersion: 1.44.5-1+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-e2fsprogs
Relationship: SPDXRef-e2fsprogs CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 3e6f9134334e16b818d81c84bbe3173fef55e4a1ea2b092b2482a2b4f089891c
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: fdisk
SPDXID: SPDXRef-fdisk
PackageComment: <text>PURL is pkg:deb/debian/fdisk@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/fdisk@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-fdisk
Relationship: SPDXRef-fdisk CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 8d2bb3aa11c56220bf6d460330d2043d06ab712d6efd5b5ef225f2215c7878d3
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: findutils
SPDXID: SPDXRef-findutils
PackageComment: <text>PURL is pkg:deb/debian/findutils@4.6.0+git+20190209-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/findutils@4.6.0+git+20190209-2?arch=amd64
PackageVersion: 4.6.0+git+20190209-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-findutils
Relationship: SPDXRef-findutils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 1dea4dc0c8ee9addff8ca1126f40edf07e454a5f09f11179d8de4218588c5337
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: gcc-8-base
SPDXID: SPDXRef-gcc-8-base
PackageComment: <text>PURL is pkg:deb/debian/gcc-8-base@8.3.0-6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/gcc-8-base@8.3.0-6?arch=amd64
PackageVersion: 8.3.0-6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-gcc-8-base
Relationship: SPDXRef-gcc-8-base CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 1b00f7cef567645a7e695caf6c1ad395577e7d2e903820097ebd3496ddcfcc84
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: gpgv
SPDXID: SPDXRef-gpgv
PackageComment: <text>PURL is pkg:deb/debian/gpgv@2.2.12-1+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/gpgv@2.2.12-1+deb10u1?arch=amd64
PackageVersion: 2.2.12-1+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-gpgv
Relationship: SPDXRef-gpgv CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ GPL-3+ permissive permissive LGPL-2.1+ Expat GPL-3+ GPL-3+ LGPL-3+ GPL-3+ RFC-Reference TinySCHEME GPL-3+ CC0-1.0 TinySCHEME permissive RFC-Reference GPL-3+ LGPL-3+ LGPL-2.1+ BSD-3-clause Expat CC0-1.0
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: ae81b7fad02a6553e8f4aa55becf591fb5f209f7f946b474e99c5f4b837f109e
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: grep
SPDXID: SPDXRef-grep
PackageComment: <text>PURL is pkg:deb/debian/grep@3.3-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/grep@3.3-1?arch=amd64
PackageVersion: 3.3-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-grep
Relationship: SPDXRef-grep CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ GPL-3+ GPL-3+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 149585b7242c3f698f5280b013b3b9a1747a346a22649f71768e077e90b99a17
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: gzip
SPDXID: SPDXRef-gzip
PackageComment: <text>PURL is pkg:deb/debian/gzip@1.9-3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/gzip@1.9-3?arch=amd64
PackageVersion: 1.9-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-gzip
Relationship: SPDXRef-gzip CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 8d1a1d1b73bbb347102e9001371d1ef6891f97262e9dce8dd827032aa5c78d34
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: hostname
SPDXID: SPDXRef-hostname
PackageComment: <text>PURL is pkg:deb/debian/hostname@3.21?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/hostname@3.21?arch=amd64
PackageVersion: 3.21
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-hostname
Relationship: SPDXRef-hostname CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 869a81b7837e9a90125c511ae9dc2e7118fb3f53b99a045ced541e2564ea0d29
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: init-system-helpers
SPDXID: SPDXRef-init-system-helpers
PackageComment: <text>PURL is pkg:deb/debian/init-system-helpers@1.56+nmu1?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/init-system-helpers@1.56+nmu1?arch=all
PackageVersion: 1.56+nmu1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-init-system-helpers
Relationship: SPDXRef-init-system-helpers CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-clause BSD-3-clause GPL-2+ GPL-2+ GPL-2+ GPL-2+ BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: c457150e2faa01e6677a1d91aa76a868d2b7114deb17ade2ccc2b99235310805
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: iproute2
SPDXID: SPDXRef-iproute2
PackageComment: <text>PURL is pkg:deb/debian/iproute2@4.20.0-2+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/iproute2@4.20.0-2+deb10u1?arch=amd64
PackageVersion: 4.20.0-2+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-iproute2
Relationship: SPDXRef-iproute2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2 GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: iputils-ping
SPDXID: SPDXRef-iputils-ping
PackageComment: <text>PURL is pkg:deb/debian/iputils-ping@3:20180629-2+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/iputils-ping@3:20180629-2+deb10u2?arch=amd64
PackageVersion: 3:20180629-2+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-iputils-ping
Relationship: SPDXRef-iputils-ping CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libacl1
SPDXID: SPDXRef-libacl1
PackageComment: <text>PURL is pkg:deb/debian/libacl1@2.2.53-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libacl1@2.2.53-4?arch=amd64
PackageVersion: 2.2.53-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libacl1
Relationship: SPDXRef-libacl1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ LGPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: ca1b512a4a09317018408bbb65ee3f48abdf03dcb8da671554a1f2bd8e5d4de4
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libapt-pkg5.0
SPDXID: SPDXRef-libapt-pkg5.0
PackageComment: <text>PURL is pkg:deb/debian/libapt-pkg5.0@1.8.2.3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libapt-pkg5.0@1.8.2.3?arch=amd64
PackageVersion: 1.8.2.3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libapt-pkg5.0
Relationship: SPDXRef-libapt-pkg5.0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPLv2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: f56cefd15f3d36cfcf2b3810992059568de0838d5f39e7334052a8056a83d82c
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libattr1
SPDXID: SPDXRef-libattr1
PackageComment: <text>PURL is pkg:deb/debian/libattr1@1:2.4.48-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libattr1@1:2.4.48-4?arch=amd64
PackageVersion: 1:2.4.48-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libattr1
Relationship: SPDXRef-libattr1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ LGPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 4ba903c087f2b9661e067ca210cfd83ef2dc1a162a15b8735997bfa96ac8e760
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libaudit-common
SPDXID: SPDXRef-libaudit-common
PackageComment: <text>PURL is pkg:deb/debian/libaudit-common@1:2.8.4-3?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libaudit-common@1:2.8.4-3?arch=all
PackageVersion: 1:2.8.4-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libaudit-common
Relationship: SPDXRef-libaudit-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2 LGPL-2.1 GPL-2 GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 4e51dc247cde083528d410f525c6157b08be8b69511891cf972bc87025311371
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libaudit1
SPDXID: SPDXRef-libaudit1
PackageComment: <text>PURL is pkg:deb/debian/libaudit1@1:2.8.4-3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libaudit1@1:2.8.4-3?arch=amd64
PackageVersion: 1:2.8.4-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libaudit1
Relationship: SPDXRef-libaudit1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2 LGPL-2.1 GPL-2 GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 21f2b3dfbe7db9e15ff9c01e1ad8db35a0adf41b70a3aa71e809f7631fc2253d
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libblkid1
SPDXID: SPDXRef-libblkid1
PackageComment: <text>PURL is pkg:deb/debian/libblkid1@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libblkid1@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libblkid1
Relationship: SPDXRef-libblkid1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 0b15f3eb3cf2fbe540f99ae1c9fd5ec1730f2245b99e31c91755de71b967343a
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libbz2-1.0
SPDXID: SPDXRef-libbz2-1.0
PackageComment: <text>PURL is pkg:deb/debian/libbz2-1.0@1.0.6-9.2~deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libbz2-1.0@1.0.6-9.2~deb10u1?arch=amd64
PackageVersion: 1.0.6-9.2~deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libbz2-1.0
Relationship: SPDXRef-libbz2-1.0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-variant GPL-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 238193cbaa71cc5365ef2aa5ad45de8521ac38dd54f4ab53bafa7de15046fa89
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libc-bin
SPDXID: SPDXRef-libc-bin
PackageComment: <text>PURL is pkg:deb/debian/libc-bin@2.28-10?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libc-bin@2.28-10?arch=amd64
PackageVersion: 2.28-10
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libc-bin
Relationship: SPDXRef-libc-bin CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 00b5e84af0ee76c2a025e98cdccc6b6b11c62736f4dffef2362ddeb7e77a76f7
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libc6
SPDXID: SPDXRef-libc6
PackageComment: <text>PURL is pkg:deb/debian/libc6@2.28-10?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libc6@2.28-10?arch=amd64
PackageVersion: 2.28-10
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libc6
Relationship: SPDXRef-libc6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 6f703e27185f594f8633159d00180ea1df12d84f152261b6e88af75667195a79
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libcap-ng0
SPDXID: SPDXRef-libcap-ng0
PackageComment: <text>PURL is pkg:deb/debian/libcap-ng0@0.7.9-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libcap-ng0@0.7.9-2?arch=amd64
PackageVersion: 0.7.9-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libcap-ng0
Relationship: SPDXRef-libcap-ng0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 4f9caf61638db6dcf79529ef756a2d36c7aae6604d486a5055bb3212d823b691
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libcap2
SPDXID: SPDXRef-libcap2
PackageComment: <text>PURL is pkg:deb/debian/libcap2@1:2.25-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libcap2@1:2.25-2?arch=amd64
PackageVersion: 1:2.25-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libcap2
Relationship: SPDXRef-libcap2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause GPL-2 GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libcap2-bin
SPDXID: SPDXRef-libcap2-bin
PackageComment: <text>PURL is pkg:deb/debian/libcap2-bin@1:2.25-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libcap2-bin@1:2.25-2?arch=amd64
PackageVersion: 1:2.25-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libcap2-bin
Relationship: SPDXRef-libcap2-bin CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause BSD-3-clause GPL-2 GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libcom-err2
SPDXID: SPDXRef-libcom-err2
PackageComment: <text>PURL is pkg:deb/debian/libcom-err2@1.44.5-1+deb10u3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libcom-err2@1.44.5-1+deb10u3?arch=amd64
PackageVersion: 1.44.5-1+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libcom-err2
Relationship: SPDXRef-libcom-err2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: e5ea8e6db9453ed13199f4cbfe8e29d76c579eb6f678ab9bb4bebd7d12c1936e
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libdb5.3
SPDXID: SPDXRef-libdb5.3
PackageComment: <text>PURL is pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libdb5.3@5.3.28+dfsg1-0.5?arch=amd64
PackageVersion: 5.3.28+dfsg1-0.5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libdb5.3
Relationship: SPDXRef-libdb5.3 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: c7f0e9a423840731362ee52d4344c0bcf84318fbc06dad4fefe0e61d9e7062bc
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libdebconfclient0
SPDXID: SPDXRef-libdebconfclient0
PackageComment: <text>PURL is pkg:deb/debian/libdebconfclient0@0.249?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libdebconfclient0@0.249?arch=amd64
PackageVersion: 0.249
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libdebconfclient0
Relationship: SPDXRef-libdebconfclient0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: a03b7b51c597fa9341493907717a63f4ff16b6396cb471535da42e721bd706ec
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libelf1
SPDXID: SPDXRef-libelf1
PackageComment: <text>PURL is pkg:deb/debian/libelf1@0.176-1.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libelf1@0.176-1.1?arch=amd64
PackageVersion: 0.176-1.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libelf1
Relationship: SPDXRef-libelf1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libext2fs2
SPDXID: SPDXRef-libext2fs2
PackageComment: <text>PURL is pkg:deb/debian/libext2fs2@1.44.5-1+deb10u3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libext2fs2@1.44.5-1+deb10u3?arch=amd64
PackageVersion: 1.44.5-1+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libext2fs2
Relationship: SPDXRef-libext2fs2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: b700e55869082aa47b325b156a542c78598754f588f540ee8a2bf5cabdc5290f
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libfdisk1
SPDXID: SPDXRef-libfdisk1
PackageComment: <text>PURL is pkg:deb/debian/libfdisk1@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libfdisk1@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libfdisk1
Relationship: SPDXRef-libfdisk1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: a9426ad822dac0a2c8ee6907d2a3079c418749fb4516ba972e577cb3004ac1eb
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libffi6
SPDXID: SPDXRef-libffi6
PackageComment: <text>PURL is pkg:deb/debian/libffi6@3.2.1-9?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libffi6@3.2.1-9?arch=amd64
PackageVersion: 3.2.1-9
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libffi6
Relationship: SPDXRef-libffi6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: d4d748d897e8e53aa239ead23a18724a1a30085cc6ca41a8c31b3b1e1b3452f4
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgcc1
SPDXID: SPDXRef-libgcc1
PackageComment: <text>PURL is pkg:deb/debian/libgcc1@1:8.3.0-6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgcc1@1:8.3.0-6?arch=amd64
PackageVersion: 1:8.3.0-6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgcc1
Relationship: SPDXRef-libgcc1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: b1bb7611f3372732889d502cb1d09fe572b5fbb5288a4a8b1ed0363fecc3555a
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgcrypt20
SPDXID: SPDXRef-libgcrypt20
PackageComment: <text>PURL is pkg:deb/debian/libgcrypt20@1.8.4-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgcrypt20@1.8.4-5?arch=amd64
PackageVersion: 1.8.4-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgcrypt20
Relationship: SPDXRef-libgcrypt20 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 1b826517b328e29a441cc89e5c427896182ffc946713329f50accc8417856136
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgmp10
SPDXID: SPDXRef-libgmp10
PackageComment: <text>PURL is pkg:deb/debian/libgmp10@2:6.1.2+dfsg-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgmp10@2:6.1.2+dfsg-4?arch=amd64
PackageVersion: 2:6.1.2+dfsg-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgmp10
Relationship: SPDXRef-libgmp10 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: d9c9661c7d4d686a82c29d183124adacbefff797f1ef5723d509dbaa2e92a87c
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgnutls30
SPDXID: SPDXRef-libgnutls30
PackageComment: <text>PURL is pkg:deb/debian/libgnutls30@3.6.7-4+deb10u6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgnutls30@3.6.7-4+deb10u6?arch=amd64
PackageVersion: 3.6.7-4+deb10u6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgnutls30
Relationship: SPDXRef-libgnutls30 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: The License: License: CC0 The LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ LGPLv3+_or_GPLv2+ License: LGPLv3+_or_GPLv2+ GPLv3+ GPLv3+ GPLv3+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 7f9096293466c2f69c83566175e34b4af4a64096d7de5bc96a65cfabe47aabe8
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libgpg-error0
SPDXID: SPDXRef-libgpg-error0
PackageComment: <text>PURL is pkg:deb/debian/libgpg-error0@1.35-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libgpg-error0@1.35-1?arch=amd64
PackageVersion: 1.35-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libgpg-error0
Relationship: SPDXRef-libgpg-error0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ g10-permissive g10-permissive LGPL-2.1+ LGPL-2.1+ GPL-3+ g10-permissive g10-permissive LGPL-2.1+ GPL-3+ BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 996b67baf6b5c6fda0db2df27cce15701b122403d0a7f30e9a1f50d07205450a
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libhogweed4
SPDXID: SPDXRef-libhogweed4
PackageComment: <text>PURL is pkg:deb/debian/libhogweed4@3.4.1-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libhogweed4@3.4.1-1?arch=amd64
PackageVersion: 3.4.1-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libhogweed4
Relationship: SPDXRef-libhogweed4 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ other LGPL-2.1+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GAP LGPL-2.1+ GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: a938f22b6cead37c5f980a59330e71e2df1df4af890ea6b3432485c0da96ea58
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libidn2-0
SPDXID: SPDXRef-libidn2-0
PackageComment: <text>PURL is pkg:deb/debian/libidn2-0@2.0.5-1+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libidn2-0@2.0.5-1+deb10u1?arch=amd64
PackageVersion: 2.0.5-1+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libidn2-0
Relationship: SPDXRef-libidn2-0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-3+ LGPL-3+ GPL-3+ GPL-3+ Unicode GPL-3+ GPL-2+ LGPL-3+ Unicode
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 13c3129c4930cd8b1255dbc5da7068c036f217218d1017634b83847a659fad16
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: liblz4-1
SPDXID: SPDXRef-liblz4-1
PackageComment: <text>PURL is pkg:deb/debian/liblz4-1@1.8.3-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/liblz4-1@1.8.3-1?arch=amd64
PackageVersion: 1.8.3-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-liblz4-1
Relationship: SPDXRef-liblz4-1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-2-clause BSD-2-clause BSD-2-clause BSD-2-clause GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2 GPL-2 GPL-2 BSD-2-clause GPL-2+ GPL-2 GPL-2+ BSD-2-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 826203ecea7e8cb87aebfbb7bd2afc9f7e519f4c0f578c0404e21416572d1005
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: liblzma5
SPDXID: SPDXRef-liblzma5
PackageComment: <text>PURL is pkg:deb/debian/liblzma5@5.2.4-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/liblzma5@5.2.4-1?arch=amd64
PackageVersion: 5.2.4-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-liblzma5
Relationship: SPDXRef-liblzma5 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: License: PD probably-PD GPL-2+ PD PD LGPL-2.1+ permissive-fsf Autoconf permissive-nowarranty GPL-2 none none PD PD PD permissive-nowarranty config-h LGPL-2.1+ noderivs PD-debian LGPL-2.1+ GPL-2 GPL-2+ Autoconf permissive-fsf permissive-nowarranty
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 292dfe85defad3a08cca62beba85e90b0231d16345160f4a66aba96399c85859
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libmnl0
SPDXID: SPDXRef-libmnl0
PackageComment: <text>PURL is pkg:deb/debian/libmnl0@1.0.4-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libmnl0@1.0.4-2?arch=amd64
PackageVersion: 1.0.4-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libmnl0
Relationship: SPDXRef-libmnl0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1 GPL-2+ GPL-2+ LGPL-2.1
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libmount1
SPDXID: SPDXRef-libmount1
PackageComment: <text>PURL is pkg:deb/debian/libmount1@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libmount1@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libmount1
Relationship: SPDXRef-libmount1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: b8b28669dc4995a7a48d47d9199d1806d4fce9c4051277279d4dcc514c086ba3
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libncursesw6
SPDXID: SPDXRef-libncursesw6
PackageComment: <text>PURL is pkg:deb/debian/libncursesw6@6.1+20181013-2+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libncursesw6@6.1+20181013-2+deb10u2?arch=amd64
PackageVersion: 6.1+20181013-2+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libncursesw6
Relationship: SPDXRef-libncursesw6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 7dffe9602586300292960f2e3cf4301acfc64a91aed6fa41ea2e719ae75788b3
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libnettle6
SPDXID: SPDXRef-libnettle6
PackageComment: <text>PURL is pkg:deb/debian/libnettle6@3.4.1-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libnettle6@3.4.1-1?arch=amd64
PackageVersion: 3.4.1-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libnettle6
Relationship: SPDXRef-libnettle6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ other LGPL-2.1+ LGPL-2.1+ GPL-2+ GPL-2+ public-domain GPL-2 GAP LGPL-2.1+ GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 5a384c773ae68b0c7905ecc0abf5e45925794b679674866d7783d88786ffb0d2
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libp11-kit0
SPDXID: SPDXRef-libp11-kit0
PackageComment: <text>PURL is pkg:deb/debian/libp11-kit0@0.23.15-2+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libp11-kit0@0.23.15-2+deb10u1?arch=amd64
PackageVersion: 0.23.15-2+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libp11-kit0
Relationship: SPDXRef-libp11-kit0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause permissive-like-automake-output BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause ISC ISC+IBM BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause BSD-3-Clause same-as-rest-of-p11kit BSD-3-Clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 02b2f15ad9cd2ead38dbeb85cdba65d8e4d44155495110231504cd0de1f16f83
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpam-modules
SPDXID: SPDXRef-libpam-modules
PackageComment: <text>PURL is pkg:deb/debian/libpam-modules@1.3.1-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpam-modules@1.3.1-5?arch=amd64
PackageVersion: 1.3.1-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpam-modules
Relationship: SPDXRef-libpam-modules CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: bc8a1c2e17c0855a3ecef398299d88696ed6d8254cc03cce3800c4a4063f7d7d
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpam-modules-bin
SPDXID: SPDXRef-libpam-modules-bin
PackageComment: <text>PURL is pkg:deb/debian/libpam-modules-bin@1.3.1-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpam-modules-bin@1.3.1-5?arch=amd64
PackageVersion: 1.3.1-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpam-modules-bin
Relationship: SPDXRef-libpam-modules-bin CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 9ba6ca27c6d4077846c2ec3489c30b8d699391393fa0c0de28a1de8cffbf118e
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpam-runtime
SPDXID: SPDXRef-libpam-runtime
PackageComment: <text>PURL is pkg:deb/debian/libpam-runtime@1.3.1-5?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpam-runtime@1.3.1-5?arch=all
PackageVersion: 1.3.1-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpam-runtime
Relationship: SPDXRef-libpam-runtime CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 8aedc549e97e42fd21429d82a18ead489399ff4c15c6c688cdedea591eed9a66
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpam0g
SPDXID: SPDXRef-libpam0g
PackageComment: <text>PURL is pkg:deb/debian/libpam0g@1.3.1-5?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpam0g@1.3.1-5?arch=amd64
PackageVersion: 1.3.1-5
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpam0g
Relationship: SPDXRef-libpam0g CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: b480fef838d01dc647170fdbde8d44c12e05e04da989b3bffd44223457cee0dc
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libpcre3
SPDXID: SPDXRef-libpcre3
PackageComment: <text>PURL is pkg:deb/debian/libpcre3@2:8.39-12?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libpcre3@2:8.39-12?arch=amd64
PackageVersion: 2:8.39-12
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libpcre3
Relationship: SPDXRef-libpcre3 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 5496ea46b812b1a00104fc97b30e13fc5f8f6e9ec128a8ff4fd2d66a80cc6bee
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libseccomp2
SPDXID: SPDXRef-libseccomp2
PackageComment: <text>PURL is pkg:deb/debian/libseccomp2@2.3.3-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libseccomp2@2.3.3-4?arch=amd64
PackageVersion: 2.3.3-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libseccomp2
Relationship: SPDXRef-libseccomp2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1 LGPL-2.1 LGPL-2.1 LGPL-2.1 LGPL-2.1
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 0d0fcfc610a7a7023d55835e55ddcf625b760d195ef259fb137afff9ba4f2e9d
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libselinux1
SPDXID: SPDXRef-libselinux1
PackageComment: <text>PURL is pkg:deb/debian/libselinux1@2.8-1+b1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libselinux1@2.8-1+b1?arch=amd64
PackageVersion: 2.8-1+b1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libselinux1
Relationship: SPDXRef-libselinux1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 05238a8c13c32418511a965e7b756ab031c140ef154ca0b3b2a1bb7a14e2faab
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsemanage-common
SPDXID: SPDXRef-libsemanage-common
PackageComment: <text>PURL is pkg:deb/debian/libsemanage-common@2.8-2?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsemanage-common@2.8-2?arch=all
PackageVersion: 2.8-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsemanage-common
Relationship: SPDXRef-libsemanage-common CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: fa3c50e11afa9250f823218898084bdefea73c7cd1995ef5ed5e7c12e7b46331
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsemanage1
SPDXID: SPDXRef-libsemanage1
PackageComment: <text>PURL is pkg:deb/debian/libsemanage1@2.8-2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsemanage1@2.8-2?arch=amd64
PackageVersion: 2.8-2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsemanage1
Relationship: SPDXRef-libsemanage1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: ebc5346a40336fb481865e48a2a5356b5124fc868269dc2c1fbab2bdc2ac495e
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsepol1
SPDXID: SPDXRef-libsepol1
PackageComment: <text>PURL is pkg:deb/debian/libsepol1@2.8-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsepol1@2.8-1?arch=amd64
PackageVersion: 2.8-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsepol1
Relationship: SPDXRef-libsepol1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 5e4ebf890bab2422d3caff579006c02cc3b153e98a61b8c548a951e24c0693f2
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsmartcols1
SPDXID: SPDXRef-libsmartcols1
PackageComment: <text>PURL is pkg:deb/debian/libsmartcols1@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsmartcols1@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsmartcols1
Relationship: SPDXRef-libsmartcols1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 9a83a75545de917ada2d8a3a1aaff88e6897a873637784b0c1b45fbb93459ff4
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libss2
SPDXID: SPDXRef-libss2
PackageComment: <text>PURL is pkg:deb/debian/libss2@1.44.5-1+deb10u3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libss2@1.44.5-1+deb10u3?arch=amd64
PackageVersion: 1.44.5-1+deb10u3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libss2
Relationship: SPDXRef-libss2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 54b9d0c35c36ebf784ea88fd9fd0572057d43b229e1aa6627ef034f8c5638fd6
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libstdc++6
SPDXID: SPDXRef-libstdc++6
PackageComment: <text>PURL is pkg:deb/debian/libstdc++6@8.3.0-6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libstdc++6@8.3.0-6?arch=amd64
PackageVersion: 8.3.0-6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libstdc++6
Relationship: SPDXRef-libstdc++6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 5cc70625329655ff9382580971d4616db8aa39af958b7c995ee84598f142a4ee
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libsystemd0
SPDXID: SPDXRef-libsystemd0
PackageComment: <text>PURL is pkg:deb/debian/libsystemd0@241-7~deb10u7?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libsystemd0@241-7~deb10u7?arch=amd64
PackageVersion: 241-7~deb10u7
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libsystemd0
Relationship: SPDXRef-libsystemd0 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ CC0-1.0 GPL-2 GPL-2 GPL-2+ Expat public-domain GPL-2+ LGPL-2.1+ GPL-2 LGPL-2.1+ Expat GPL-2 GPL-2+ LGPL-2.1+ CC0-1.0
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 8f964923890974eec797e43c6343a7c77a8d2fa044bc0e8d37bbca281a5e7abd
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libtasn1-6
SPDXID: SPDXRef-libtasn1-6
PackageComment: <text>PURL is pkg:deb/debian/libtasn1-6@4.13-3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libtasn1-6@4.13-3?arch=amd64
PackageVersion: 4.13-3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libtasn1-6
Relationship: SPDXRef-libtasn1-6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 2771ea1ba49d30f033e67e708f71da9b031649c7c13d2ce04cb3ec913ac3b839
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libtinfo6
SPDXID: SPDXRef-libtinfo6
PackageComment: <text>PURL is pkg:deb/debian/libtinfo6@6.1+20181013-2+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libtinfo6@6.1+20181013-2+deb10u2?arch=amd64
PackageVersion: 6.1+20181013-2+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libtinfo6
Relationship: SPDXRef-libtinfo6 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 7f39c7a7b02c3373a427aa276830a6e1e0c4cc003371f34e2e50e9992aa70e1a
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libudev1
SPDXID: SPDXRef-libudev1
PackageComment: <text>PURL is pkg:deb/debian/libudev1@241-7~deb10u7?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libudev1@241-7~deb10u7?arch=amd64
PackageVersion: 241-7~deb10u7
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libudev1
Relationship: SPDXRef-libudev1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+ CC0-1.0 GPL-2 GPL-2 GPL-2+ Expat public-domain GPL-2+ LGPL-2.1+ GPL-2 LGPL-2.1+ Expat GPL-2 GPL-2+ LGPL-2.1+ CC0-1.0
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 08c5fe9535f776bedf9401c34849894b123f723a2d8de81d1ce7b72992c4b369
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libunistring2
SPDXID: SPDXRef-libunistring2
PackageComment: <text>PURL is pkg:deb/debian/libunistring2@0.9.10-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libunistring2@0.9.10-1?arch=amd64
PackageVersion: 0.9.10-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libunistring2
Relationship: SPDXRef-libunistring2 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-3+ FreeSoftware GPL-2+ GPL-3+ GPL-3+ GPL-2+ GPL-2+ MIT GPL-3+ LGPL-3+ GPL-3+ GPL-2+ GFDL-1.2+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: bc3961271c9f78e7ef93dec3bf7c1047f2cde73dfc3e2b0c475b6115b76780f8
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libuuid1
SPDXID: SPDXRef-libuuid1
PackageComment: <text>PURL is pkg:deb/debian/libuuid1@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libuuid1@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libuuid1
Relationship: SPDXRef-libuuid1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 90b90bef4593d4f347fb1e74a63c5609daa86d4c5003b14e85f58628d6c118b2
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libxtables12
SPDXID: SPDXRef-libxtables12
PackageComment: <text>PURL is pkg:deb/debian/libxtables12@1.8.2-4?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libxtables12@1.8.2-4?arch=amd64
PackageVersion: 1.8.2-4
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libxtables12
Relationship: SPDXRef-libxtables12 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 Artistic-2 GPL-2 GPL-2 GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 custom GPL-2 GPL-2+ Artistic-2
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256:
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: libzstd1
SPDXID: SPDXRef-libzstd1
PackageComment: <text>PURL is pkg:deb/debian/libzstd1@1.3.8+dfsg-3+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/libzstd1@1.3.8+dfsg-3+deb10u2?arch=amd64
PackageVersion: 1.3.8+dfsg-3+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-libzstd1
Relationship: SPDXRef-libzstd1 CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: BSD-3-clause zlib zlib zlib GPL-2+ Expat BSD-3-clause Expat Expat GPL-2 BSD-3-clause
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 3c1d6fdaeb4a2357c27b3ac7a488eee562fef2961972098be386b5618e6d20ce
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: login
SPDXID: SPDXRef-login
PackageComment: <text>PURL is pkg:deb/debian/login@1:4.5-1.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/login@1:4.5-1.1?arch=amd64
PackageVersion: 1:4.5-1.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-login
Relationship: SPDXRef-login CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: fa2d9a8686e5a1d0fef5d7f4c3a1bbd9cb69ee0fa506eec8c6c5528ababe7905
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: mawk
SPDXID: SPDXRef-mawk
PackageComment: <text>PURL is pkg:deb/debian/mawk@1.3.3-17+b3?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/mawk@1.3.3-17+b3?arch=amd64
PackageVersion: 1.3.3-17+b3
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-mawk
Relationship: SPDXRef-mawk CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 054b9bf39546852c24355349d1973493733ae6ac3f0f82f61708979af17fc79f
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: mount
SPDXID: SPDXRef-mount
PackageComment: <text>PURL is pkg:deb/debian/mount@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/mount@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-mount
Relationship: SPDXRef-mount CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: cab13d70da8392bd00edbbcb046cf6d9e6791935ff2865836f30b7e595bd6fb0
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: ncurses-base
SPDXID: SPDXRef-ncurses-base
PackageComment: <text>PURL is pkg:deb/debian/ncurses-base@6.1+20181013-2+deb10u2?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/ncurses-base@6.1+20181013-2+deb10u2?arch=all
PackageVersion: 6.1+20181013-2+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-ncurses-base
Relationship: SPDXRef-ncurses-base CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 45e0f42bfcc6e5a2c204d2c585300611d9c0ac915fab6b378f4981651169927f
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: ncurses-bin
SPDXID: SPDXRef-ncurses-bin
PackageComment: <text>PURL is pkg:deb/debian/ncurses-bin@6.1+20181013-2+deb10u2?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/ncurses-bin@6.1+20181013-2+deb10u2?arch=amd64
PackageVersion: 6.1+20181013-2+deb10u2
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-ncurses-bin
Relationship: SPDXRef-ncurses-bin CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 1304c853b655945a673bfb40b1053576d107e3956dbabbf635c5140f322f7d59
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: passwd
SPDXID: SPDXRef-passwd
PackageComment: <text>PURL is pkg:deb/debian/passwd@1:4.5-1.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/passwd@1:4.5-1.1?arch=amd64
PackageVersion: 1:4.5-1.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-passwd
Relationship: SPDXRef-passwd CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 23af4a550da375cefbac02484e49ed1c2e6717c0f76533137b3f2fa2cc277cf2
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: perl-base
SPDXID: SPDXRef-perl-base
PackageComment: <text>PURL is pkg:deb/debian/perl-base@5.28.1-6+deb10u1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/perl-base@5.28.1-6+deb10u1?arch=amd64
PackageVersion: 5.28.1-6+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-perl-base
Relationship: SPDXRef-perl-base CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Expat REGCOMP, GPL-3+-WITH-BISON-EXCEPTION GPL-1+ Unicode GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ S2P GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ BZIP GPL-1+ ZLIB GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Artistic GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-2+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Expat Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ RRA-KEEP-THIS-NOTICE Expat Expat GPL-1+ Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ BSD-3-clause-with-weird-numbering GPL-1+ Expat Expat GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ TEXT-TABS GPL-2+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Unicode GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Artistic BSD-3-clause GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ Artistic GPL-1+ SDBM-PUBLIC-DOMAIN GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ RRA-KEEP-THIS-NOTICE GPL-1+ GPL-1+ GPL-1+ GPL-1+ GPL-1+ DONT-CHANGE-THE-GPL GPL-1+ GPL-1+ Artistic-dist Artistic GPL-1+ GPL-1+ LGPL-2.1 GPL-1+ GPL-2+ Artistic Artistic-2 BZIP ZLIB Expat BSD-3-clause-with-weird-numbering BSD-4-clause-POWERDOG Unicode BSD-3-clause-GENERIC BSD-3-clause REGCOMP TEXT-TABS S2P DONT-CHANGE-THE-GPL SDBM-PUBLIC-DOMAIN GPL-3+-WITH-BISON-EXCEPTION HSIEH-DERIVATIVE HSIEH-BSD RRA-KEEP-THIS-NOTICE Artistic-dist
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 41191859a20c49a1f629ecd8899576631858676c4079f7bbff3808f5376e3680
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: sed
SPDXID: SPDXRef-sed
PackageComment: <text>PURL is pkg:deb/debian/sed@4.7-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/sed@4.7-1?arch=amd64
PackageVersion: 4.7-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-sed
Relationship: SPDXRef-sed CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 37917c63d062cd924ba5084820353b256377d88371fbb89537ff06f7a0b5a6c7
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: sysvinit-utils
SPDXID: SPDXRef-sysvinit-utils
PackageComment: <text>PURL is pkg:deb/debian/sysvinit-utils@2.93-8?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/sysvinit-utils@2.93-8?arch=amd64
PackageVersion: 2.93-8
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-sysvinit-utils
Relationship: SPDXRef-sysvinit-utils CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2+ GPL-2+
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 800cb3bbbae83d095cc7b8f3acb416726a76cde474931f6698b90ff2f7258540
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: tar
SPDXID: SPDXRef-tar
PackageComment: <text>PURL is pkg:deb/debian/tar@1.30+dfsg-6?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/tar@1.30+dfsg-6?arch=amd64
PackageVersion: 1.30+dfsg-6
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-tar
Relationship: SPDXRef-tar CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 8afffcf03195b06b0345a81b307d662fb9419c5795e238ccc5b36eceea3ec22f
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: tzdata
SPDXID: SPDXRef-tzdata
PackageComment: <text>PURL is pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/tzdata@2021a-0+deb10u1?arch=all
PackageVersion: 2021a-0+deb10u1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-tzdata
Relationship: SPDXRef-tzdata CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared:
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 00da63f221b9afa6bc766742807e398cf183565faba339649bafa3f93375fbcb
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: util-linux
SPDXID: SPDXRef-util-linux
PackageComment: <text>PURL is pkg:deb/debian/util-linux@2.33.1-0.1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/util-linux@2.33.1-0.1?arch=amd64
PackageVersion: 2.33.1-0.1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-util-linux
Relationship: SPDXRef-util-linux CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: GPL-2+ GPL-2 GPL-2 GPL-2 GPL-2 GPL-2 public-domain BSD-4-clause MIT MIT BSD-2-clause BSD-2-clause BSD-2-clause BSD-3-clause BSD-3-clause LGPL-2+ LGPL-2+ LGPL-2+ LGPL-2.1+ LGPL-2.1+ LGPL-2.1+ GPL-3+ LGPL-2.1+ LGPL LGPL-2.1+ LGPL LGPL LGPL-2.1+ LGPL-3+ LGPL GPL-2+ public-domain GPL-2 GPL-2+ GPL-3+ BSD-2-clause BSD-3-clause BSD-4-clause LGPL LGPL-2+ LGPL-2.1+ LGPL-3+ MIT
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: cb773a92b1ad145d3ab8ff91f037c3aa48a7b2ec52a1fa47a441385eee840ce8
## 2.4 All-Levels Components
## Needs: $PACKAGE, $VERSION and $HASH
PackageName: zlib1g
SPDXID: SPDXRef-zlib1g
PackageComment: <text>PURL is pkg:deb/debian/zlib1g@1:1.2.11.dfsg-1?arch=amd64</text>
ExternalRef: PACKAGE-MANAGER purl pkg:deb/debian/zlib1g@1:1.2.11.dfsg-1?arch=amd64
PackageVersion: 1:1.2.11.dfsg-1
PackageSupplier: Organization: Debian
Relationship: SPDXRef-docker-debian-latest-4a7a1f401734 CONTAINS SPDXRef-zlib1g
Relationship: SPDXRef-zlib1g CONTAINS NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: Zlib Zlib Zlib Zlib Zlib
PackageCopyrightText: NOASSERTION
PackageChecksum: SHA256: 61bc9085aadd3007433ce6f560a08446a3d3ceb0b5e061db3fc62c42fbfe3eff
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment