From e5cc1e2dbfb2ffeb1e34ff560d8a4f54b3b57e92 Mon Sep 17 00:00:00 2001 From: Marius <24592972+gilbN@users.noreply.github.com> Date: Wed, 1 Oct 2025 23:12:53 +0200 Subject: [PATCH 01/12] initial buildx imagetools inspect sbom, not tested, needs failover logic --- ci/ci.py | 98 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 98 insertions(+) diff --git a/ci/ci.py b/ci/ci.py index efe7dfd..f72b57c 100755 --- a/ci/ci.py +++ b/ci/ci.py @@ -10,6 +10,7 @@ from logging import Logger import mimetypes import json +import subprocess from requests.adapters import HTTPAdapter from urllib3.util.retry import Retry from functools import wraps @@ -320,10 +321,12 @@ def container_test(self, tag: str) -> None: # Run these tests in parallel so the runtime data is more accurate. with ThreadPoolExecutor(max_workers=2,thread_name_prefix=thread_name) as executor: + future_buildx_sbom: Future[str] = executor.submit(self.generate_sbom_buildx, tag) future_sbom: Future[str] = executor.submit(self.generate_sbom, tag) future_logs: Future[bool] = executor.submit(self.watch_container_logs, container, tag) sbom: str = future_sbom.result(self.sbom_timeout + 5) # Set a thread timeout if the function for some reason hangs + buildx_sbom: str = future_buildx_sbom.result(self.sbom_timeout + 5) # Set a thread timeout if the function for some reason hangs logsfound: bool = future_logs.result(self.logs_timeout + 5) # Set a thread timeout if the function for some reason hangs build_info: dict = self.get_build_info(container,tag) # Get the image build info @@ -521,6 +524,101 @@ def generate_sbom(self, tag:str) -> str: except Exception: self.logger.exception("Failed to remove the syft container, %s",tag) return "ERROR" + + def get_sbom_buildx(self, tag: str) -> str: + """get the SBOM for the image tag using docker buildx imagetools inspect. + + Args: + tag (str): The tag we are testing + + Returns: + str: SBOM output if successful, otherwise "ERROR". + """ + image_ref = f"{self.image}:{tag}" + platform: str = self.get_platform(tag) + cmd = [ + "docker", "buildx", "imagetools", "inspect", + image_ref, + "--format", f'{{{{ json (index .SBOM "linux/{platform}").SPDX }}}}' + ] + try: + result: subprocess.CompletedProcess[str] = subprocess.run(cmd, capture_output=True, text=True, timeout=self.sbom_timeout, check=False) + if result.returncode == 0 and result.stdout.strip(): + self.logger.info("SBOM generated for %s using buildx imagetools inspect.", image_ref) + return result.stdout.strip() + self.logger.error("Failed to generate SBOM for %s using buildx: %s", image_ref, result.stderr) + return "ERROR" + except Exception: + self.logger.exception("Exception while running buildx imagetools inspect for %s", image_ref) + return "ERROR" + + def parse_buildx_sbom(self, sbom: str) -> list[dict[str, str]]: + """Parse the buildx imagetools inspect SBOM string and extract package information. + + Args: + sbom (str): The SBOM in JSON format. + Returns: + list[dict[str, str]]: A list of dictionaries containing package information. + """ + try: + sbom_data: dict[str, Any] = json.loads(sbom) + packages: list[dict[str, str]] = [] + package_list: list[dict[str, Any]] = sbom_data.get("packages", []) + for item in package_list: + package_info = { + "name": item.get("name", ""), + "version": item.get("versionInfo", ""), + } + packages.append(package_info) + return packages + except json.JSONDecodeError: + self.logger.error("Failed to parse buildx imagetools inspectSBOM.") + return [] + + def format_package_table(self, packages: list[dict[str, str]]) -> str: + """Format a list of package dicts into a padded string table. + + Args: + packages (list[dict[str, str]]): List of package dicts with 'name' and 'version' keys. + + Returns: + str: Padded string table of package names and versions. + """ + name_width = 75 + version_width = 25 + lines: list[str] = [] + header = f"{'NAME'.ljust(name_width)}{'VERSION'.ljust(version_width)}" + lines.append(header) + for pkg in packages: + name = pkg.get('name', '')[:name_width] + version = pkg.get('version', '')[:version_width] + lines.append(f"{name.ljust(name_width)}{version.ljust(version_width)}") + return "\n".join(lines) + + def generate_sbom_buildx(self, tag: str) -> str: + """Generate the SBOM for the image tag using docker buildx imagetools inspect. + + Args: + tag (str): The tag we are testing + Returns: + str: Formatted package table if successful, otherwise "ERROR". + """ + start_time = time.time() + self.logger.info("Generating SBOM for %s using buildx imagetools inspect", tag) + test = "Create SBOM (buildx)" + sbom_raw: str = self.get_sbom_buildx(tag) + if sbom_raw != "ERROR": + packages_list: list[dict[str, str]] = self.parse_buildx_sbom(sbom_raw) + if packages_list: + packages_formatted: str = self.format_package_table(packages_list) + self._add_test_result(tag, test, "PASS", "-", start_time) + self.logger.success("%s package list %s: PASSED after %.2f seconds", test, tag, time.time() - start_time) + self.create_html_ansi_file(packages_formatted, tag, "buildx_sbom") + return packages_formatted + self.logger.error("Failed to generate SBOM output on tag %s using buildx.", tag) + self.report_status = "FAIL" + self._add_test_result(tag, test, "FAIL", "Failed to generate SBOM using buildx", start_time) + return "ERROR" @deprecated(reason="Use get_build_info instead") def get_build_version(self,container:Container,tag:str) -> str: From 376ec12146cf982d0a83e6434311903d776cc781 Mon Sep 17 00:00:00 2001 From: Marius <24592972+gilbN@users.noreply.github.com> Date: Sat, 4 Oct 2025 17:20:20 +0200 Subject: [PATCH 02/12] Retrieve SBOM from image manifest and fall back to syft if it fails. Move hardcoded values to enum classes Add tests for new sbom methods --- Dockerfile | 1 + ci/ci.py | 302 +- test_build.py | 11 +- tests/sbom_buildx_blob.txt | 5485 ++++++++++++++++++++++++++ tests/sbom_buildx_formatted_blob.txt | 149 + tests/test_ci.py | 68 +- 6 files changed, 5890 insertions(+), 126 deletions(-) create mode 100644 tests/sbom_buildx_blob.txt create mode 100644 tests/sbom_buildx_formatted_blob.txt diff --git a/Dockerfile b/Dockerfile index 76d34b1..6a95fcd 100755 --- a/Dockerfile +++ b/Dockerfile @@ -23,6 +23,7 @@ RUN \ apt-get update && \ apt-get install -y --no-install-recommends \ docker-ce \ + docker-buildx-plugin \ google-chrome-stable \ python3-venv \ unzip \ diff --git a/ci/ci.py b/ci/ci.py index f72b57c..89c8e4e 100755 --- a/ci/ci.py +++ b/ci/ci.py @@ -16,6 +16,7 @@ from functools import wraps from typing import Callable, Any, Literal from textwrap import dedent +import enum import boto3 import requests @@ -63,6 +64,35 @@ def wrapper(*args, **kwargs) -> Any: return wrapper return deprecated_decorator +class CITests(enum.Enum): + """Enum for the different CI tests""" + CONTAINER_START = "Container Start" + CREATE_SBOM = "Create SBOM" + CREATE_BUILDX_SBOM = "Create Buildx SBOM" + CREATE_SYFT_SBOM = "Create Syft SBOM" + CAPTURE_SCREENSHOT = "Capture Screenshot" + GET_BUILD_INFO = "Get Build Info" + +class CITestResult(enum.Enum): + """Enum for the different CI test results""" + PASS = "PASS" + FAIL = "FAIL" + ERROR = "ERROR" + +class CIReportResult(enum.Enum): + """Enum for the different CI report results""" + PASS = "PASS" + FAIL = "FAIL" + ERROR = "ERROR" + +class Platform(enum.Enum): + """Enum for the different platforms""" + AMD64 = "amd64" + ARM64 = "arm64" + ARM32 = "arm" + RISCV64 = "riscv64" + UNKNOWN = "amd64" + class SetEnvs(): """Simple helper class that sets up the ENVs""" def __init__(self) -> None: @@ -270,7 +300,7 @@ def __init__(self) -> None: self.tags = list(self.tags_env.split("|")) self.tag_report_tests:dict[str,dict[str,dict]] = {tag: {"test":{}} for tag in self.tags} # Adds all the tags as keys with an empty dict as value to the dict self.report_containers: dict[str,dict[str,dict]] = {} - self.report_status = "PASS" + self.report_status = CIReportResult.PASS self.outdir: str = f"{os.path.dirname(os.path.realpath(__file__))}/output/{self.image}/{self.meta_tag}" os.makedirs(self.outdir, exist_ok=True) self.s3_client = self.create_s3_client() @@ -321,33 +351,31 @@ def container_test(self, tag: str) -> None: # Run these tests in parallel so the runtime data is more accurate. with ThreadPoolExecutor(max_workers=2,thread_name_prefix=thread_name) as executor: - future_buildx_sbom: Future[str] = executor.submit(self.generate_sbom_buildx, tag) - future_sbom: Future[str] = executor.submit(self.generate_sbom, tag) + future_sbom: Future[str|CITestResult] = executor.submit(self.make_sbom, tag) future_logs: Future[bool] = executor.submit(self.watch_container_logs, container, tag) - sbom: str = future_sbom.result(self.sbom_timeout + 5) # Set a thread timeout if the function for some reason hangs - buildx_sbom: str = future_buildx_sbom.result(self.sbom_timeout + 5) # Set a thread timeout if the function for some reason hangs + sbom: str|CITestResult = future_sbom.result(self.sbom_timeout + 5) # Set a thread timeout if the function for some reason hangs logsfound: bool = future_logs.result(self.logs_timeout + 5) # Set a thread timeout if the function for some reason hangs - build_info: dict = self.get_build_info(container,tag) # Get the image build info + build_info: dict[str,str] = self.get_build_info(container,tag) # Get the image build info if not logsfound: self.logger.error("Test of %s FAILED after %.2f seconds", tag, time.time() - start_time) self._endtest(container, tag, build_info, sbom, False, start_time) return - if build_info["version"] == "ERROR": + if build_info["version"] == CITestResult.ERROR.value: self.logger.error("Test of %s FAILED after %.2f seconds", tag, time.time() - start_time) self._endtest(container, tag, build_info, sbom, False, start_time) return - if sbom == "ERROR": + if sbom == CITestResult.ERROR: self.logger.error("Test of %s FAILED after %.2f seconds", tag, time.time() - start_time) self._endtest(container, tag, build_info, sbom, False, start_time) return # Screenshot the web interface and check connectivity screenshot_success, browser_logs = self.take_screenshot(container, tag) - if not screenshot_success and self.get_platform(tag) == "amd64": + if not screenshot_success and self.get_platform(tag) == Platform.AMD64.value: self.logger.error("Test of %s FAILED after %.2f seconds", tag, time.time() - start_time) self._endtest(container, tag, build_info, sbom, False, start_time, browser_logs) return @@ -356,7 +384,7 @@ def container_test(self, tag: str) -> None: self.logger.success("Test of %s PASSED after %.2f seconds", tag, time.time() - start_time) return - def _endtest(self, container:Container, tag:str, build_info:dict[str,str], packages:str, test_success: bool, start_time:float|int = 0.0, browser_logs: str = "") -> None: + def _endtest(self, container:Container, tag:str, build_info:dict[str,str], packages:str|CITestResult, test_success: bool, start_time:float|int = 0.0, browser_logs: str = "") -> None: """End the test with as much info as we have and append to the report. Args: @@ -372,10 +400,12 @@ def _endtest(self, container:Container, tag:str, build_info:dict[str,str], packa runtime = "-" if isinstance(start_time,(float, int)): runtime = f"{time.time() - start_time:.2f}s" + if isinstance(packages, CITestResult): + packages = packages.value logblob: str = container.logs(timestamps=True).decode("utf-8") self.create_html_ansi_file(logblob, tag, "log") # Generate an html container log file based on the latest logs try: - container.remove(force="true") + container.remove(force=True) except APIError: self.logger.exception("Failed to remove container %s",tag) warning_texts: dict[str, str] = { @@ -431,15 +461,15 @@ def get_platform(self, tag: str) -> str: platform: str = tag[:5] match platform: case "amd64": - return "amd64" + return Platform.AMD64.value case "arm64": - return "arm64" + return Platform.ARM64.value case "arm32": - return "arm" + return Platform.ARM32.value case "riscv": - return "riscv64" + return Platform.RISCV64.value case _: - return "amd64" + return Platform.UNKNOWN.value @deprecated(reason="Use generate_sbom instead") def export_package_info(self, container:Container, tag:str) -> str: @@ -478,7 +508,8 @@ def export_package_info(self, container:Container, tag:str) -> str: "message":str(error)}.items()))) self.report_status = "FAIL" return packages - + + @deprecated(reason="Use make_sbom instead") def generate_sbom(self, tag:str) -> str: """Generate the SBOM for the image tag. @@ -524,34 +555,104 @@ def generate_sbom(self, tag:str) -> str: except Exception: self.logger.exception("Failed to remove the syft container, %s",tag) return "ERROR" - - def get_sbom_buildx(self, tag: str) -> str: - """get the SBOM for the image tag using docker buildx imagetools inspect. + + def make_sbom(self, tag: str) -> "str|CITestResult": + """Generate the SBOM for the image tag. It will first try to use buildx imagetools inspect, if that fails it will fallback to using syft. + + Creates the output file in `{self.outdir}/{tag}.sbom.html` Args: tag (str): The tag we are testing + Returns: + str: Return the output if successful otherwise "ERROR". + """ + start_time = time.time() + sbom: str | CITestResult = self.get_sbom_buildx_blob(tag) + if isinstance(sbom, str) and sbom != CITestResult.ERROR: + packages: list[dict[str, str]] = self.parse_buildx_sbom(sbom) + formatted_table: str | CITestResult = self.format_package_table(packages=packages) + if packages and formatted_table != CITestResult.ERROR: + self.create_html_ansi_file(formatted_table, tag, "sbom") + self._add_test_result(tag, CITests.CREATE_BUILDX_SBOM, CITestResult.PASS, "-", start_time) + self.logger.success("Create SBOM %s: PASSED after %.2f seconds", tag, time.time() - start_time) + return formatted_table + self.logger.error("No packages found in buildx SBOM for tag %s", tag) + self.report_status = CIReportResult.FAIL + self._add_test_result(tag, CITests.CREATE_BUILDX_SBOM, CITestResult.FAIL, "No packages found in buildx SBOM", start_time) + else: + self.logger.warning("Falling back to Syft for SBOM generation on tag %s", tag) + + # Fallback to syft if buildx failed + sbom = self.get_sbom_syft(tag) + if sbom != CITestResult.ERROR: + self._add_test_result(tag, CITests.CREATE_SBOM, CITestResult.PASS, "-", start_time) + self.logger.success("Create SBOM %s: PASSED after %.2f seconds", tag, time.time() - start_time) + self.create_html_ansi_file(str(sbom),tag,"sbom") + return sbom + self.report_status = CIReportResult.FAIL + self._add_test_result(tag, CITests.CREATE_SBOM, CITestResult.FAIL, "Failed to generate SBOM with both buildx and syft", start_time) + return CITestResult.ERROR + + def get_sbom_syft(self, tag: str) -> str | CITestResult: + """Get the SBOM for the image tag using Syft. + Args: + tag (str): The tag we are testing Returns: str: SBOM output if successful, otherwise "ERROR". """ - image_ref = f"{self.image}:{tag}" + start_time = time.time() platform: str = self.get_platform(tag) - cmd = [ - "docker", "buildx", "imagetools", "inspect", - image_ref, - "--format", f'{{{{ json (index .SBOM "linux/{platform}").SPDX }}}}' - ] + syft:Container = self.client.containers.run(image=f"ghcr.io/anchore/syft:{self.syft_image_tag}",command=f"{self.image}:{tag} --platform=linux/{platform}", + detach=True, volumes={"/var/run/docker.sock": {"bind": "/var/run/docker.sock", "mode": "rw"}}) + self.logger.info("Creating SBOM package list on %s with syft version %s",tag,self.syft_image_tag) + logblob: str = "" + t_end: float = time.time() + self.sbom_timeout + self.logger.info("Tailing the Syft container logs for %s seconds looking the 'VERSION' message on tag: %s",self.sbom_timeout,tag) + while time.time() < t_end: + time.sleep(5) + try: + logblob: str = syft.logs().decode("utf-8") + if "VERSION" in logblob: + self.logger.info("Get Syft package versions for %s completed", tag) + self.logger.success("%s package list %s: PASSED after %.2f seconds", CITests.CREATE_SYFT_SBOM.value, tag, time.time() - start_time) + try: + syft.remove(force=True) + except Exception: + self.logger.exception("Failed to remove the Syft container, %s",tag) + return logblob + except (APIError,ContainerError,ImageNotFound): + self.logger.exception("Creating Syft SBOM package list on %s: FAIL", tag) + self.logger.error("Failed to generate Syft SBOM output on tag %s. SBOM output:\n%s",tag, logblob) + try: + syft.remove(force=True) + except Exception: + self.logger.exception("Failed to remove the Syft container, %s",tag) + return CITestResult.ERROR + + def get_sbom_buildx_blob(self, tag: str) -> str | CITestResult: + """Get the SBOM for the image tag using docker buildx imagetools inspect. + + Args: + tag (str): The tag we are testing + + Returns: + str: SBOM output if successful, otherwise "CITestResult.ERROR". + """ try: - result: subprocess.CompletedProcess[str] = subprocess.run(cmd, capture_output=True, text=True, timeout=self.sbom_timeout, check=False) + image_ref = f"{self.image}:{tag}" + self.logger.info("Generating SBOM for %s using buildx imagetools inspect", image_ref) + cmd = f'docker buildx imagetools inspect {image_ref} --format "{{{{ json (index .SBOM).SPDX.packages }}}}"' + result: subprocess.CompletedProcess[str] = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=self.sbom_timeout, check=False) if result.returncode == 0 and result.stdout.strip(): - self.logger.info("SBOM generated for %s using buildx imagetools inspect.", image_ref) + self.logger.success("SBOM generated for %s using buildx imagetools inspect.", tag) return result.stdout.strip() - self.logger.error("Failed to generate SBOM for %s using buildx: %s", image_ref, result.stderr) - return "ERROR" + self.logger.error("Failed to generate buildx SBOM for %s: %s", tag, result.stderr) + return CITestResult.ERROR except Exception: - self.logger.exception("Exception while running buildx imagetools inspect for %s", image_ref) - return "ERROR" - + self.logger.exception("Exception while running buildx imagetools inspect for %s", tag) + return CITestResult.ERROR + def parse_buildx_sbom(self, sbom: str) -> list[dict[str, str]]: """Parse the buildx imagetools inspect SBOM string and extract package information. @@ -563,19 +664,20 @@ def parse_buildx_sbom(self, sbom: str) -> list[dict[str, str]]: try: sbom_data: dict[str, Any] = json.loads(sbom) packages: list[dict[str, str]] = [] - package_list: list[dict[str, Any]] = sbom_data.get("packages", []) - for item in package_list: + for item in sbom_data: package_info = { "name": item.get("name", ""), "version": item.get("versionInfo", ""), } + if package_info in packages: + continue packages.append(package_info) return packages except json.JSONDecodeError: - self.logger.error("Failed to parse buildx imagetools inspectSBOM.") + self.logger.error("Failed to parse buildx imagetools inspect SBOM output.") return [] - def format_package_table(self, packages: list[dict[str, str]]) -> str: + def format_package_table(self, packages: list[dict[str, str]]) -> str | CITestResult: """Format a list of package dicts into a padded string table. Args: @@ -584,41 +686,24 @@ def format_package_table(self, packages: list[dict[str, str]]) -> str: Returns: str: Padded string table of package names and versions. """ - name_width = 75 - version_width = 25 - lines: list[str] = [] - header = f"{'NAME'.ljust(name_width)}{'VERSION'.ljust(version_width)}" - lines.append(header) - for pkg in packages: - name = pkg.get('name', '')[:name_width] - version = pkg.get('version', '')[:version_width] - lines.append(f"{name.ljust(name_width)}{version.ljust(version_width)}") - return "\n".join(lines) - - def generate_sbom_buildx(self, tag: str) -> str: - """Generate the SBOM for the image tag using docker buildx imagetools inspect. - - Args: - tag (str): The tag we are testing - Returns: - str: Formatted package table if successful, otherwise "ERROR". - """ - start_time = time.time() - self.logger.info("Generating SBOM for %s using buildx imagetools inspect", tag) - test = "Create SBOM (buildx)" - sbom_raw: str = self.get_sbom_buildx(tag) - if sbom_raw != "ERROR": - packages_list: list[dict[str, str]] = self.parse_buildx_sbom(sbom_raw) - if packages_list: - packages_formatted: str = self.format_package_table(packages_list) - self._add_test_result(tag, test, "PASS", "-", start_time) - self.logger.success("%s package list %s: PASSED after %.2f seconds", test, tag, time.time() - start_time) - self.create_html_ansi_file(packages_formatted, tag, "buildx_sbom") - return packages_formatted - self.logger.error("Failed to generate SBOM output on tag %s using buildx.", tag) - self.report_status = "FAIL" - self._add_test_result(tag, test, "FAIL", "Failed to generate SBOM using buildx", start_time) - return "ERROR" + try: + if not packages: + self.logger.error("No packages found to format.") + return CITestResult.ERROR + # Dynamically determine column widths based on longest name/version + name_width = max(len(pkg.get('name', '')) for pkg in packages) + 10 + version_width = max(len(pkg.get('version', '')) for pkg in packages) + 10 + lines: list[str] = [] + header = f"{'NAME'.ljust(name_width)}{'VERSION'.ljust(version_width)}" + lines.append(header) + for pkg in packages: + name = pkg.get('name', '')[:name_width] + version = pkg.get('version', '')[:version_width] + lines.append(f"{name.ljust(name_width)}{version.ljust(version_width)}") + return "\n".join(lines) + except Exception: + self.logger.exception("Failed to format package table.") + return CITestResult.ERROR @deprecated(reason="Use get_build_info instead") def get_build_version(self,container:Container,tag:str) -> str: @@ -666,7 +751,7 @@ def get_image_name(self) -> str: case _: return self.image - def get_build_url(self, tag) -> str: + def get_build_url(self, tag: str) -> str: """Get the build url from the IMAGE env. Args: @@ -708,7 +793,6 @@ def get_build_info(self,container:Container,tag:str) -> dict[str,str]: } ``` """ - test = "Get build info" start_time = time.time() try: self.logger.info("Fetching build info on tag: %s",tag) @@ -721,15 +805,15 @@ def get_build_info(self,container:Container,tag:str) -> dict[str,str]: "tag": tag, "image": self.get_image_name() } - self._add_test_result(tag, test, "PASS", "-", start_time) + self._add_test_result(tag, CITests.GET_BUILD_INFO, CITestResult.PASS, "-", start_time) self.logger.success("Get build info on tag '%s': PASS", tag) except (APIError,KeyError) as error: self.logger.exception("Get build info on tag '%s': FAIL", tag) - build_info = {"version": "ERROR", "created": "ERROR", "size": "ERROR", "maintainer": "ERROR"} + build_info = {"version": CITestResult.ERROR.value, "created": CITestResult.ERROR.value, "size": CITestResult.ERROR.value, "maintainer": CITestResult.ERROR.value} if isinstance(error,KeyError): error: str = f"KeyError: {error}" - self._add_test_result(tag, test, "FAIL", str(error), start_time) - self.report_status = "FAIL" + self._add_test_result(tag, CITests.GET_BUILD_INFO, CITestResult.FAIL, str(error), start_time) + self.report_status = CIReportResult.FAIL return build_info def watch_container_logs(self, container:Container, tag:str) -> bool: @@ -743,7 +827,6 @@ def watch_container_logs(self, container:Container, tag:str) -> bool: Returns: bool: Return True if the "done" message is found, otherwise False. """ - test = "Container startup" start_time = time.time() t_end: float = time.time() + self.logs_timeout self.logger.info("Tailing the %s logs for %s seconds looking for the 'done' message", tag, self.logs_timeout) @@ -751,20 +834,20 @@ def watch_container_logs(self, container:Container, tag:str) -> bool: try: logblob: str = container.logs().decode("utf-8") if "[services.d] done." in logblob or "[ls.io-init] done." in logblob: - self.logger.info("%s completed for %s",test, tag) - self._add_test_result(tag, test, "PASS", "-", start_time) - self.logger.success("%s %s: PASSED after %.2f seconds", test, tag, time.time() - start_time) + self.logger.info("%s completed for %s",CITests.CONTAINER_START.value, tag) + self._add_test_result(tag, CITests.CONTAINER_START, CITestResult.PASS, "-", start_time) + self.logger.success("%s %s: PASSED after %.2f seconds", CITests.CONTAINER_START.value, tag, time.time() - start_time) return True time.sleep(1) except APIError as error: - self.logger.exception("%s %s: FAIL - INIT NOT FINISHED", test, tag) - self._add_test_result(tag, test, "FAIL", f"INIT NOT FINISHED: {str(error)}", start_time) - self.report_status = "FAIL" + self.logger.exception("%s %s: FAIL - INIT NOT FINISHED", CITests.CONTAINER_START.value, tag) + self._add_test_result(tag, CITests.CONTAINER_START, CITestResult.FAIL, f"INIT NOT FINISHED: {str(error)}", start_time) + self.report_status = CIReportResult.FAIL return False - self.logger.error("%s failed for %s", test, tag) - self._add_test_result(tag, test, "FAIL", "INIT NOT FINISHED", start_time) - self.logger.error("%s %s: FAIL - INIT NOT FINISHED", test, tag) - self.report_status = "FAIL" + self.logger.error("%s failed for %s", CITests.CONTAINER_START.value, tag) + self._add_test_result(tag, CITests.CONTAINER_START, CITestResult.FAIL, "INIT NOT FINISHED", start_time) + self.logger.error("%s %s: FAIL - INIT NOT FINISHED", CITests.CONTAINER_START.value, tag) + self.report_status = CIReportResult.FAIL return False def report_render(self) -> None: @@ -777,7 +860,7 @@ def report_render(self) -> None: with open(f"{self.outdir}/index.html", mode="w", encoding="utf-8") as file_: file_.write(template.render( report_containers=self.report_containers, - report_status=self.report_status, + report_status=self.report_status.value, meta_tag=self.meta_tag, image=self.get_image_name(), bucket=self.bucket, @@ -790,11 +873,11 @@ def badge_render(self) -> None: """Render the badge file for upload""" self.logger.info("Creating badge") try: - badge = anybadge.Badge("CI", self.report_status, thresholds={ + badge = anybadge.Badge("CI", self.report_status.value, thresholds={ "PASS": "green", "FAIL": "red"}) badge.write_badge(f"{self.outdir}/badge.svg", overwrite=True) with open(f"{self.outdir}/ci-status.yml", "w", encoding="utf-8") as file: - file.write(f"CI: '{self.report_status}'") + file.write(f"CI: '{self.report_status.value}'\n") except (ValueError,RuntimeError,FileNotFoundError,OSError): self.logger.exception("Failed to render badge file!") @@ -835,7 +918,7 @@ def report_upload(self) -> None: raise CIError(f"Upload Error: {error}") from error self.logger.info("Report available on https://%s/%s/%s/index.html",self.bucket, self.image, self.meta_tag) - def create_html_ansi_file(self, blob:str, tag:str, name:str, full:bool = True) -> None: + def create_html_ansi_file(self, blob:str|CITestResult, tag:str, name:str, full:bool = True) -> None: """Creates an HTML file in the "self.outdir" directory that we upload to S3 Args: @@ -846,6 +929,8 @@ def create_html_ansi_file(self, blob:str, tag:str, name:str, full:bool = True) - """ try: + if isinstance(blob,CITestResult): + blob = blob.value self.logger.info("Creating %s.%s.html", tag, name) converter = Ansi2HTMLConverter(title=f"{tag}-{name}") html_logs: str = converter.convert(blob,full=full) @@ -891,26 +976,28 @@ def log_upload(self) -> None: except (S3UploadFailedError, ClientError, FileNotFoundError) as e: self.logger.exception(f"Failed to upload the CI logs! Error: {e}") - def _add_test_result(self, tag:str, test:str, status:str, message:str, start_time:float|int = 0.0) -> None: + def _add_test_result(self, tag:str, test:CITests, status:CITestResult, message:str, start_time:float|int = 0.0) -> None: """Add a test result to the report Args: tag (str): The tag we are testing - test (str): The test we are running - status (str): The status of the test + test (CITests): The test we are running + status (CITestResult): The status of the test message (str): The message of the test start_time (str, optional): The start time of the test. Defaults to 0.0. Used to calculate the runtime of the test. """ - if status not in ["PASS","FAIL"]: - raise ValueError("Status must be either PASS or FAIL") + if not isinstance(test, CITests): + raise ValueError("test must be an instance of CITests") + if not isinstance(status, CITestResult): + raise ValueError("status must be an instance of CITestResult") if tag not in self.tags: raise ValueError("Tag not in the list of tags") if not start_time: runtime = "-" if isinstance(start_time,(float, int)): runtime: str = f"{time.time() - start_time:.2f}s" - self.tag_report_tests[tag]["test"][test] = (dict(sorted({ - "status":status, + self.tag_report_tests[tag]["test"][test.value] = (dict(sorted({ + "status":status.value, "message":message, "runtime": runtime}.items()))) @@ -930,7 +1017,6 @@ def take_screenshot(self, container: Container, tag:str) -> tuple[bool, str]: return True, "" proto: Literal["https", "http"] = "https" if self.ssl.upper() == "TRUE" else "http" screenshot_timeout = time.time() + self.screenshot_timeout - test = "Get screenshot" start_time = time.time() driver: WebDriver | None = None browser_logs: str = "" @@ -951,7 +1037,7 @@ def take_screenshot(self, container: Container, tag:str) -> tuple[bool, str]: driver.get_screenshot_as_file(f"{self.outdir}/{tag}.png") if not os.path.isfile(f"{self.outdir}/{tag}.png"): raise FileNotFoundError(f"Screenshot '{self.outdir}/{tag}.png' not found") - self._add_test_result(tag, test, "PASS", "-", start_time) + self._add_test_result(tag, CITests.CAPTURE_SCREENSHOT, CITestResult.PASS, "-", start_time) self.logger.success("Screenshot %s: PASSED after %.2f seconds", tag, time.time() - start_time) return True, self._get_browser_logs(driver, tag) except Exception as error: @@ -962,23 +1048,23 @@ def take_screenshot(self, container: Container, tag:str) -> tuple[bool, str]: raise error raise TimeoutException("Timeout taking screenshot") except (requests.Timeout, requests.ConnectionError, KeyError) as error: - self._add_test_result(tag, test, "FAIL", f"CONNECTION ERROR: {str(error)}", start_time) + self._add_test_result(tag, CITests.CAPTURE_SCREENSHOT, CITestResult.FAIL, f"CONNECTION ERROR: {str(error)}", start_time) self.logger.exception("Screenshot %s FAIL CONNECTION ERROR", tag) - self.report_status = "FAIL" + self.report_status = CIReportResult.FAIL if driver: browser_logs = self._get_browser_logs(driver, tag) return False, browser_logs except TimeoutException as error: - self._add_test_result(tag, test, "FAIL", f"TIMEOUT: {str(error)}", start_time) + self._add_test_result(tag, CITests.CAPTURE_SCREENSHOT, CITestResult.FAIL, f"TIMEOUT: {str(error)}", start_time) self.logger.exception("Screenshot %s FAIL TIMEOUT", tag) - self.report_status = "FAIL" + self.report_status = CIReportResult.FAIL if driver: browser_logs = self._get_browser_logs(driver, tag) return False, browser_logs except (WebDriverException, Exception) as error: - self._add_test_result(tag, test, "FAIL", f"UNKNOWN: {str(error)}", start_time) + self._add_test_result(tag, CITests.CAPTURE_SCREENSHOT, CITestResult.FAIL, f"UNKNOWN: {str(error)}", start_time) self.logger.exception("Screenshot %s FAIL UNKNOWN", tag) - self.report_status = "FAIL" + self.report_status = CIReportResult.FAIL if driver: browser_logs = self._get_browser_logs(driver, tag) return False, browser_logs diff --git a/test_build.py b/test_build.py index b1ca671..fd186cb 100644 --- a/test_build.py +++ b/test_build.py @@ -1,8 +1,7 @@ #!/usr/bin/env python3 import os -import time from logging import Logger -from ci.ci import CI, CIError +from ci.ci import CI, CIError, Platform, CIReportResult from ci.logger import configure_logging def run_test() -> None: @@ -10,15 +9,15 @@ def run_test() -> None: ci.run(ci.tags) # Don't set the whole report as failed if any of the ARM tag fails. for tag in ci.report_containers.keys(): - if tag.startswith("amd64") and ci.report_containers[tag]['test_success'] == True: - ci.report_status = 'PASS' # Override the report_status if an ARM tag failed, but the amd64 tag passed. - if ci.report_status == 'PASS': + if tag.startswith(Platform.AMD64.value) and ci.report_containers[tag]['test_success'] == True: + ci.report_status = CIReportResult.PASS # Override the report_status if an ARM tag failed, but the amd64 tag passed. + if ci.report_status == CIReportResult.PASS: logger.success('All tests PASSED after %.2f seconds', ci.total_runtime) ci.report_render() ci.badge_render() ci.json_render() ci.report_upload() - if ci.report_status == 'PASS': # Exit based on test results + if ci.report_status == CIReportResult.PASS: # Exit based on test results ci.log_upload() return logger.error('Tests FAILED') diff --git a/tests/sbom_buildx_blob.txt b/tests/sbom_buildx_blob.txt new file mode 100644 index 0000000..0d76120 --- /dev/null +++ b/tests/sbom_buildx_blob.txt @@ -0,0 +1,5485 @@ +[ + { + "SPDXID": "SPDXRef-Package-deb-adduser-98299e49069387ec", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:adduser:adduser:3.137ubuntu1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/adduser@3.137ubuntu1?arch=all\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later", + "name": "adduser", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/adduser/copyright, /var/lib/dpkg/info/adduser.conffiles, /var/lib/dpkg/info/adduser.md5sums, /var/lib/dpkg/info/adduser.list, /var/lib/dpkg/info/adduser.postrm, /var/lib/dpkg/info/adduser.preinst", + "supplier": "NOASSERTION", + "versionInfo": "3.137ubuntu1" + }, + { + "SPDXID": "SPDXRef-Package-deb-apt-bfe0855a529838fa", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:apt:apt:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/apt@2.8.3?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later", + "name": "apt", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/apt/copyright, /var/lib/dpkg/info/apt.conffiles, /var/lib/dpkg/info/apt.md5sums, /var/lib/dpkg/info/apt.list, /var/lib/dpkg/info/apt.postinst, /var/lib/dpkg/info/apt.postrm, /var/lib/dpkg/info/apt.preinst, /var/lib/dpkg/info/apt.prerm, /var/lib/dpkg/info/apt.shlibs, /var/lib/dpkg/info/apt.triggers", + "supplier": "NOASSERTION", + "versionInfo": "2.8.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-apt-utils-90966dc650cccb89", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:apt-utils:apt-utils:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:apt-utils:apt_utils:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:apt_utils:apt-utils:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:apt_utils:apt_utils:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:apt:apt-utils:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:apt:apt_utils:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/apt-utils@2.8.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=apt", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later", + "name": "apt-utils", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/apt-utils/copyright, /var/lib/dpkg/info/apt-utils.md5sums, /var/lib/dpkg/info/apt-utils.list", + "supplier": "NOASSERTION", + "versionInfo": "2.8.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-base-files-779daaca50ffddcd", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:base-files:base-files:13ubuntu10.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:base-files:base_files:13ubuntu10.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:base_files:base-files:13ubuntu10.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:base_files:base_files:13ubuntu10.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:base:base-files:13ubuntu10.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:base:base_files:13ubuntu10.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/base-files@13ubuntu10.3?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-GPL", + "name": "base-files", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/base-files/copyright, /var/lib/dpkg/info/base-files.conffiles, /var/lib/dpkg/info/base-files.md5sums, /var/lib/dpkg/info/base-files.list, /var/lib/dpkg/info/base-files.postinst, /var/lib/dpkg/info/base-files.postrm, /var/lib/dpkg/info/base-files.preinst, /var/lib/dpkg/info/base-files.prerm, /var/lib/dpkg/info/base-files.triggers", + "supplier": "NOASSERTION", + "versionInfo": "13ubuntu10.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-base-passwd-628f5a2163cf1196", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:base-passwd:base-passwd:3.6.3build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:base-passwd:base_passwd:3.6.3build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:base_passwd:base-passwd:3.6.3build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:base_passwd:base_passwd:3.6.3build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:base:base-passwd:3.6.3build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:base:base_passwd:3.6.3build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/base-passwd@3.6.3build1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND LicenseRef-public-domain", + "name": "base-passwd", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/base-passwd/copyright, /var/lib/dpkg/info/base-passwd.md5sums, /var/lib/dpkg/info/base-passwd.list, /var/lib/dpkg/info/base-passwd.postinst, /var/lib/dpkg/info/base-passwd.postrm, /var/lib/dpkg/info/base-passwd.preinst, /var/lib/dpkg/info/base-passwd.templates", + "supplier": "NOASSERTION", + "versionInfo": "3.6.3build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-bash-41360a594ea0f59a", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:bash:bash:5.2.21-2ubuntu4:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/bash@5.2.21-2ubuntu4?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-4-Clause-UC AND GFDL-1.3-only AND LicenseRef-GFDL-NIV-1.3 AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND Latex2e AND LicenseRef-MIT-like AND LicenseRef-permissive", + "name": "bash", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/bash/copyright, /var/lib/dpkg/info/bash.conffiles, /var/lib/dpkg/info/bash.md5sums, /var/lib/dpkg/info/bash.list, /var/lib/dpkg/info/bash.postinst, /var/lib/dpkg/info/bash.postrm, /var/lib/dpkg/info/bash.prerm", + "supplier": "NOASSERTION", + "versionInfo": "5.2.21-2ubuntu4" + }, + { + "SPDXID": "SPDXRef-Package-deb-bsdutils-3aa01bfba1c59322", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:bsdutils:bsdutils:1\\:2.39.3-9ubuntu6.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/bsdutils@1%3A2.39.3-9ubuntu6.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=util-linux%402.39.3-9ubuntu6.3", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND BSD-4-Clause AND LicenseRef-BSLA AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "name": "bsdutils", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/bsdutils/copyright, /var/lib/dpkg/info/bsdutils.md5sums, /var/lib/dpkg/info/bsdutils.list", + "supplier": "NOASSERTION", + "versionInfo": "1:2.39.3-9ubuntu6.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-ca-certificates-652c9fc105a76b5f", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ca-certificates:ca-certificates:20240203:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ca-certificates:ca_certificates:20240203:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ca_certificates:ca-certificates:20240203:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ca_certificates:ca_certificates:20240203:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ca:ca-certificates:20240203:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ca:ca_certificates:20240203:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/ca-certificates@20240203?arch=all\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND MPL-2.0", + "name": "ca-certificates", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/ca-certificates/copyright, /var/lib/dpkg/info/ca-certificates.md5sums, /var/lib/dpkg/info/ca-certificates.config, /var/lib/dpkg/info/ca-certificates.list, /var/lib/dpkg/info/ca-certificates.postinst, /var/lib/dpkg/info/ca-certificates.postrm, /var/lib/dpkg/info/ca-certificates.templates, /var/lib/dpkg/info/ca-certificates.triggers", + "supplier": "NOASSERTION", + "versionInfo": "20240203" + }, + { + "SPDXID": "SPDXRef-Package-deb-catatonit-a486d47019214ef2", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:catatonit:catatonit:0.1.7-1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/catatonit@0.1.7-1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-3.0-only AND GPL-3.0-or-later AND MPL-2.0", + "name": "catatonit", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/catatonit/copyright, /var/lib/dpkg/info/catatonit.md5sums, /var/lib/dpkg/info/catatonit.list", + "supplier": "NOASSERTION", + "versionInfo": "0.1.7-1" + }, + { + "SPDXID": "SPDXRef-Package-deb-coreutils-67004a9ba913d469", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:coreutils:coreutils:9.4-3ubuntu6.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/coreutils@9.4-3ubuntu6.1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-4-Clause-UC AND FSFULLR AND GFDL-1.3-only AND LicenseRef-GFDL-NIV-1.3 AND GPL-3.0-only AND GPL-3.0-or-later AND ISC", + "name": "coreutils", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/coreutils/copyright, /var/lib/dpkg/info/coreutils.md5sums, /var/lib/dpkg/info/coreutils.list", + "supplier": "NOASSERTION", + "versionInfo": "9.4-3ubuntu6.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-cron-7fd90d3c23e9ab5e", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:cron:cron:3.0pl1-184ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/cron@3.0pl1-184ubuntu2?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-Artistic AND GPL-2.0-only AND GPL-2.0-or-later AND ISC AND LicenseRef-Paul-Vixie-s-license", + "name": "cron", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/cron/copyright, /var/lib/dpkg/info/cron.conffiles, /var/lib/dpkg/info/cron.md5sums, /var/lib/dpkg/info/cron.list, /var/lib/dpkg/info/cron.postinst, /var/lib/dpkg/info/cron.postrm, /var/lib/dpkg/info/cron.preinst, /var/lib/dpkg/info/cron.prerm", + "supplier": "NOASSERTION", + "versionInfo": "3.0pl1-184ubuntu2" + }, + { + "SPDXID": "SPDXRef-Package-deb-cron-daemon-common-f7f1e56a9f42aa77", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:cron-daemon-common:cron-daemon-common:3.0pl1-184ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:cron-daemon-common:cron_daemon_common:3.0pl1-184ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:cron_daemon_common:cron-daemon-common:3.0pl1-184ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:cron_daemon_common:cron_daemon_common:3.0pl1-184ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:cron-daemon:cron-daemon-common:3.0pl1-184ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:cron-daemon:cron_daemon_common:3.0pl1-184ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:cron_daemon:cron-daemon-common:3.0pl1-184ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:cron_daemon:cron_daemon_common:3.0pl1-184ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:cron:cron-daemon-common:3.0pl1-184ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:cron:cron_daemon_common:3.0pl1-184ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/cron-daemon-common@3.0pl1-184ubuntu2?arch=all\u0026distro=ubuntu-24.04\u0026upstream=cron", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-Artistic AND GPL-2.0-only AND GPL-2.0-or-later AND ISC AND LicenseRef-Paul-Vixie-s-license", + "name": "cron-daemon-common", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/cron-daemon-common/copyright, /var/lib/dpkg/info/cron-daemon-common.conffiles, /var/lib/dpkg/info/cron-daemon-common.md5sums, /var/lib/dpkg/info/cron-daemon-common.list, /var/lib/dpkg/info/cron-daemon-common.postinst, /var/lib/dpkg/info/cron-daemon-common.postrm", + "supplier": "NOASSERTION", + "versionInfo": "3.0pl1-184ubuntu2" + }, + { + "SPDXID": "SPDXRef-Package-deb-curl-fe83f3079632ad96", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:curl:curl:8.5.0-2ubuntu10.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/curl@8.5.0-2ubuntu10.6?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND FSFULLR AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND ISC AND OLDAP-2.8 AND X11 AND curl", + "name": "curl", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/curl/copyright, /var/lib/dpkg/info/curl.md5sums, /var/lib/dpkg/info/curl.list", + "supplier": "NOASSERTION", + "versionInfo": "8.5.0-2ubuntu10.6" + }, + { + "SPDXID": "SPDXRef-Package-deb-dash-b65ce48fce2635c7", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:dash:dash:0.5.12-6ubuntu5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/dash@0.5.12-6ubuntu5?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-public-domain", + "name": "dash", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/dash/copyright, /var/lib/dpkg/info/dash.md5sums, /var/lib/dpkg/info/dash.list, /var/lib/dpkg/info/dash.postinst, /var/lib/dpkg/info/dash.postrm, /var/lib/dpkg/info/dash.prerm", + "supplier": "NOASSERTION", + "versionInfo": "0.5.12-6ubuntu5" + }, + { + "SPDXID": "SPDXRef-Package-deb-debconf-b8c7bec2088fc738", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:debconf:debconf:1.5.86ubuntu1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/debconf@1.5.86ubuntu1?arch=all\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause", + "name": "debconf", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/debconf/copyright, /var/lib/dpkg/info/debconf.conffiles, /var/lib/dpkg/info/debconf.md5sums, /var/lib/dpkg/info/debconf.config, /var/lib/dpkg/info/debconf.list, /var/lib/dpkg/info/debconf.postinst, /var/lib/dpkg/info/debconf.templates", + "supplier": "NOASSERTION", + "versionInfo": "1.5.86ubuntu1" + }, + { + "SPDXID": "SPDXRef-Package-deb-debianutils-f32b4704c3fa30f4", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:debianutils:debianutils:5.17build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/debianutils@5.17build1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND SMAIL-GPL AND LicenseRef-public-domain", + "name": "debianutils", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/debianutils/copyright, /var/lib/dpkg/info/debianutils.md5sums, /var/lib/dpkg/info/debianutils.list, /var/lib/dpkg/info/debianutils.postinst, /var/lib/dpkg/info/debianutils.postrm, /var/lib/dpkg/info/debianutils.prerm, /var/lib/dpkg/info/debianutils.triggers", + "supplier": "NOASSERTION", + "versionInfo": "5.17build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-diffutils-3d2cf63ae2e37d1a", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:diffutils:diffutils:1\\:3.10-1build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/diffutils@1%3A3.10-1build1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "FSFAP AND FSFULLR AND GFDL-1.3-only AND LicenseRef-GFDL-NIV-1.3 AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND X11 AND LicenseRef-public-domain", + "name": "diffutils", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/diffutils/copyright, /var/lib/dpkg/info/diffutils.md5sums, /var/lib/dpkg/info/diffutils.list", + "supplier": "NOASSERTION", + "versionInfo": "1:3.10-1build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-dirmngr-59c22b4eb331d815", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:dirmngr:dirmngr:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/dirmngr@2.4.4-2ubuntu17.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gnupg2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "name": "dirmngr", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/dirmngr/copyright, /var/lib/dpkg/info/dirmngr.md5sums, /var/lib/dpkg/info/dirmngr.list, /var/lib/dpkg/info/dirmngr.postinst, /var/lib/dpkg/info/dirmngr.postrm, /var/lib/dpkg/info/dirmngr.preinst, /var/lib/dpkg/info/dirmngr.prerm", + "supplier": "NOASSERTION", + "versionInfo": "2.4.4-2ubuntu17.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-dpkg-6b4314937bcd9ebe", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:dpkg:dpkg:1.22.6ubuntu6.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/dpkg@1.22.6ubuntu6.2?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-public-domain-s-s-d", + "name": "dpkg", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/dpkg/copyright, /var/lib/dpkg/info/dpkg.conffiles, /var/lib/dpkg/info/dpkg.md5sums, /var/lib/dpkg/info/dpkg.list, /var/lib/dpkg/info/dpkg.postinst, /var/lib/dpkg/info/dpkg.postrm", + "supplier": "NOASSERTION", + "versionInfo": "1.22.6ubuntu6.2" + }, + { + "SPDXID": "SPDXRef-Package-deb-e2fsprogs-1ee1cf7fe399e312", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:e2fsprogs:e2fsprogs:1.47.0-2.4\\~exp1ubuntu4.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/e2fsprogs@1.47.0-2.4~exp1ubuntu4.1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "Apache-2.0 AND Apache-2.0 AND BSD-3-Clause AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND ISC AND Kazlib AND LGPL-2.0-only AND Latex2e", + "name": "e2fsprogs", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/e2fsprogs/copyright, /var/lib/dpkg/info/e2fsprogs.conffiles, /var/lib/dpkg/info/e2fsprogs.md5sums, /var/lib/dpkg/info/e2fsprogs.list, /var/lib/dpkg/info/e2fsprogs.postinst, /var/lib/dpkg/info/e2fsprogs.postrm, /var/lib/dpkg/info/e2fsprogs.preinst, /var/lib/dpkg/info/e2fsprogs.prerm", + "supplier": "NOASSERTION", + "versionInfo": "1.47.0-2.4~exp1ubuntu4.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-findutils-b9814dc4998bd300", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:findutils:findutils:4.9.0-5build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/findutils@4.9.0-5build1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND FSFAP AND FSFULLR AND GFDL-1.3-only AND LicenseRef-GFDL-NIV-1.3- AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND ISC AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND X11 AND LicenseRef-public-domain", + "name": "findutils", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/findutils/copyright, /var/lib/dpkg/info/findutils.md5sums, /var/lib/dpkg/info/findutils.list", + "supplier": "NOASSERTION", + "versionInfo": "4.9.0-5build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-gcc-14-base-1adead95e56feff9", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gcc-14-base:gcc-14-base:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gcc-14-base:gcc_14_base:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gcc_14_base:gcc-14-base:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gcc_14_base:gcc_14_base:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gcc-14:gcc-14-base:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gcc-14:gcc_14_base:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gcc_14:gcc-14-base:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gcc_14:gcc_14_base:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gcc:gcc-14-base:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gcc:gcc_14_base:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/gcc-14-base@14.2.0-4ubuntu2~24.04?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gcc-14", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-Artistic AND GFDL-1.2-only AND LicenseRef-GPL AND GPL-3.0-only AND LicenseRef-LGPL", + "name": "gcc-14-base", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gcc-14-base/copyright, /var/lib/dpkg/info/gcc-14-base:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "14.2.0-4ubuntu2~24.04" + }, + { + "SPDXID": "SPDXRef-Package-deb-gnupg-9cf40981dc0dd7b7", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg:gnupg:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/gnupg@2.4.4-2ubuntu17.3?arch=all\u0026distro=ubuntu-24.04\u0026upstream=gnupg2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "name": "gnupg", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gnupg/copyright, /var/lib/dpkg/info/gnupg.md5sums, /var/lib/dpkg/info/gnupg.list", + "supplier": "NOASSERTION", + "versionInfo": "2.4.4-2ubuntu17.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-gnupg-l10n-57f9b081532e3408", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg-l10n:gnupg-l10n:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg-l10n:gnupg_l10n:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg_l10n:gnupg-l10n:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg_l10n:gnupg_l10n:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg:gnupg-l10n:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg:gnupg_l10n:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/gnupg-l10n@2.4.4-2ubuntu17.3?arch=all\u0026distro=ubuntu-24.04\u0026upstream=gnupg2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "name": "gnupg-l10n", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gnupg-l10n/copyright, /var/lib/dpkg/info/gnupg-l10n.md5sums, /var/lib/dpkg/info/gnupg-l10n.list", + "supplier": "NOASSERTION", + "versionInfo": "2.4.4-2ubuntu17.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-gnupg-utils-bee049983812c632", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg-utils:gnupg-utils:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg-utils:gnupg_utils:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg_utils:gnupg-utils:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg_utils:gnupg_utils:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg:gnupg-utils:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gnupg:gnupg_utils:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/gnupg-utils@2.4.4-2ubuntu17.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gnupg2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "name": "gnupg-utils", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gnupg-utils/copyright, /var/lib/dpkg/info/gnupg-utils.md5sums, /var/lib/dpkg/info/gnupg-utils.list", + "supplier": "NOASSERTION", + "versionInfo": "2.4.4-2ubuntu17.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-gpg-0aba777ff2e36270", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg:gpg:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/gpg@2.4.4-2ubuntu17.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gnupg2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "name": "gpg", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gpg/copyright, /var/lib/dpkg/info/gpg.md5sums, /var/lib/dpkg/info/gpg.list", + "supplier": "NOASSERTION", + "versionInfo": "2.4.4-2ubuntu17.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-gpg-agent-1a7b4d1eb6aa9512", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg-agent:gpg-agent:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg-agent:gpg_agent:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg_agent:gpg-agent:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg_agent:gpg_agent:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg:gpg-agent:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg:gpg_agent:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/gpg-agent@2.4.4-2ubuntu17.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gnupg2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "name": "gpg-agent", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gpg-agent/copyright, /var/lib/dpkg/info/gpg-agent.conffiles, /var/lib/dpkg/info/gpg-agent.md5sums, /var/lib/dpkg/info/gpg-agent.list, /var/lib/dpkg/info/gpg-agent.postinst, /var/lib/dpkg/info/gpg-agent.postrm", + "supplier": "NOASSERTION", + "versionInfo": "2.4.4-2ubuntu17.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-gpg-wks-client-0030be527c68b42a", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg-wks-client:gpg-wks-client:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg-wks-client:gpg_wks_client:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg_wks_client:gpg-wks-client:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg_wks_client:gpg_wks_client:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg-wks:gpg-wks-client:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg-wks:gpg_wks_client:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg_wks:gpg-wks-client:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg_wks:gpg_wks_client:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg:gpg-wks-client:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpg:gpg_wks_client:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/gpg-wks-client@2.4.4-2ubuntu17.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gnupg2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "name": "gpg-wks-client", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gpg-wks-client/copyright, /var/lib/dpkg/info/gpg-wks-client.md5sums, /var/lib/dpkg/info/gpg-wks-client.list", + "supplier": "NOASSERTION", + "versionInfo": "2.4.4-2ubuntu17.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-gpgconf-2dd472274ba641aa", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpgconf:gpgconf:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/gpgconf@2.4.4-2ubuntu17.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gnupg2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "name": "gpgconf", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gpgconf/copyright, /var/lib/dpkg/info/gpgconf.md5sums, /var/lib/dpkg/info/gpgconf.list", + "supplier": "NOASSERTION", + "versionInfo": "2.4.4-2ubuntu17.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-gpgsm-af198ea4577f9122", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpgsm:gpgsm:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/gpgsm@2.4.4-2ubuntu17.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gnupg2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "name": "gpgsm", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gpgsm/copyright, /var/lib/dpkg/info/gpgsm.md5sums, /var/lib/dpkg/info/gpgsm.list", + "supplier": "NOASSERTION", + "versionInfo": "2.4.4-2ubuntu17.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-gpgv-21d76c4fb81983b3", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gpgv:gpgv:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/gpgv@2.4.4-2ubuntu17.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gnupg2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "name": "gpgv", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gpgv/copyright, /var/lib/dpkg/info/gpgv.md5sums, /var/lib/dpkg/info/gpgv.list", + "supplier": "NOASSERTION", + "versionInfo": "2.4.4-2ubuntu17.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-grep-f0aa2fa812feea5d", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:grep:grep:3.11-4build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/grep@3.11-4build1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-3.0-only AND GPL-3.0-or-later", + "name": "grep", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/grep/copyright, /var/lib/dpkg/info/grep.md5sums, /var/lib/dpkg/info/grep.list", + "supplier": "NOASSERTION", + "versionInfo": "3.11-4build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-gzip-6ef02dd49ce06248", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:gzip:gzip:1.12-1ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/gzip@1.12-1ubuntu3.1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-FSF-manpages AND LicenseRef-GFDL-1.3--no-invariant AND LicenseRef-GFDL-3 AND GPL-3.0-only AND GPL-3.0-or-later", + "name": "gzip", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gzip/copyright, /var/lib/dpkg/info/gzip.md5sums, /var/lib/dpkg/info/gzip.list, /var/lib/dpkg/info/gzip.postinst, /var/lib/dpkg/info/gzip.preinst", + "supplier": "NOASSERTION", + "versionInfo": "1.12-1ubuntu3.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-hostname-7179d4e6330cd8fa", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:hostname:hostname:3.23\\+nmu2ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/hostname@3.23%2Bnmu2ubuntu2?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only", + "name": "hostname", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/hostname/copyright, /var/lib/dpkg/info/hostname.md5sums, /var/lib/dpkg/info/hostname.list", + "supplier": "NOASSERTION", + "versionInfo": "3.23+nmu2ubuntu2" + }, + { + "SPDXID": "SPDXRef-Package-deb-init-system-helpers-55f477d3dcf15da3", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:init-system-helpers:init-system-helpers:1.66ubuntu1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:init-system-helpers:init_system_helpers:1.66ubuntu1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:init_system_helpers:init-system-helpers:1.66ubuntu1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:init_system_helpers:init_system_helpers:1.66ubuntu1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:init-system:init-system-helpers:1.66ubuntu1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:init-system:init_system_helpers:1.66ubuntu1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:init_system:init-system-helpers:1.66ubuntu1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:init_system:init_system_helpers:1.66ubuntu1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:init:init-system-helpers:1.66ubuntu1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:init:init_system_helpers:1.66ubuntu1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/init-system-helpers@1.66ubuntu1?arch=all\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later", + "name": "init-system-helpers", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/init-system-helpers/copyright, /var/lib/dpkg/info/init-system-helpers.md5sums, /var/lib/dpkg/info/init-system-helpers.list", + "supplier": "NOASSERTION", + "versionInfo": "1.66ubuntu1" + }, + { + "SPDXID": "SPDXRef-Package-deb-jq-a3dc5610d6af081a", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:jq:jq:1.7.1-3ubuntu0.24.04.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/jq@1.7.1-3ubuntu0.24.04.1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "CC-BY-3.0 AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later AND MIT", + "name": "jq", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/jq/copyright, /var/lib/dpkg/info/jq.md5sums, /var/lib/dpkg/info/jq.list", + "supplier": "NOASSERTION", + "versionInfo": "1.7.1-3ubuntu0.24.04.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-keyboxd-3f3c2a0af17fae2b", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:keyboxd:keyboxd:2.4.4-2ubuntu17.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/keyboxd@2.4.4-2ubuntu17.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gnupg2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-RFC-Reference AND LicenseRef-TinySCHEME AND LicenseRef-permissive", + "name": "keyboxd", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/keyboxd/copyright, /var/lib/dpkg/info/keyboxd.md5sums, /var/lib/dpkg/info/keyboxd.list, /var/lib/dpkg/info/keyboxd.postinst, /var/lib/dpkg/info/keyboxd.postrm", + "supplier": "NOASSERTION", + "versionInfo": "2.4.4-2ubuntu17.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-krb5-locales-bd4194806dab0fb5", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:krb5-locales:krb5-locales:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:krb5-locales:krb5_locales:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:krb5_locales:krb5-locales:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:krb5_locales:krb5_locales:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:krb5:krb5-locales:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:krb5:krb5_locales:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/krb5-locales@1.20.1-6ubuntu2.6?arch=all\u0026distro=ubuntu-24.04\u0026upstream=krb5", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only", + "name": "krb5-locales", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/krb5-locales/copyright, /var/lib/dpkg/info/krb5-locales.md5sums, /var/lib/dpkg/info/krb5-locales.list", + "supplier": "NOASSERTION", + "versionInfo": "1.20.1-6ubuntu2.6" + }, + { + "SPDXID": "SPDXRef-Package-deb-libacl1-bb3fa210c4617fe7", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libacl1:libacl1:2.3.2-1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libacl1@2.3.2-1build1.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=acl", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LGPL-2.1-only", + "name": "libacl1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libacl1/copyright, /var/lib/dpkg/info/libacl1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.3.2-1build1.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libapt-pkg6.0t64-13d506459809d51e", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libapt-pkg6.0t64:libapt-pkg6.0t64:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libapt-pkg6.0t64:libapt_pkg6.0t64:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libapt_pkg6.0t64:libapt-pkg6.0t64:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libapt_pkg6.0t64:libapt_pkg6.0t64:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libapt:libapt-pkg6.0t64:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libapt:libapt_pkg6.0t64:2.8.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libapt-pkg6.0t64@2.8.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=apt", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later", + "name": "libapt-pkg6.0t64", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libapt-pkg6.0t64/copyright, /var/lib/dpkg/info/libapt-pkg6.0t64:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.8.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-libassuan0-8e5f5ced49e7b28c", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libassuan0:libassuan0:2.5.6-1build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libassuan0@2.5.6-1build1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libassuan", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-GAP AND LicenseRef-GAP-FSF AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later", + "name": "libassuan0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libassuan0/copyright, /var/lib/dpkg/info/libassuan0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.5.6-1build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libattr1-f220b53ee9e82286", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libattr1:libattr1:1\\:2.5.2-1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libattr1@1%3A2.5.2-1build1.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=attr", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LGPL-2.1-only", + "name": "libattr1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libattr1/copyright, /var/lib/dpkg/info/libattr1:amd64.conffiles, /var/lib/dpkg/info/libattr1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1:2.5.2-1build1.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libaudit-common-56e423b6e9267d88", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libaudit-common:libaudit-common:1\\:3.1.2-2.1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libaudit-common:libaudit_common:1\\:3.1.2-2.1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libaudit_common:libaudit-common:1\\:3.1.2-2.1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libaudit_common:libaudit_common:1\\:3.1.2-2.1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libaudit:libaudit-common:1\\:3.1.2-2.1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libaudit:libaudit_common:1\\:3.1.2-2.1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libaudit-common@1%3A3.1.2-2.1build1.1?arch=all\u0026distro=ubuntu-24.04\u0026upstream=audit", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-1.0-only AND GPL-2.0-only AND LGPL-2.1-only", + "name": "libaudit-common", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libaudit-common/copyright, /var/lib/dpkg/info/libaudit-common.conffiles, /var/lib/dpkg/info/libaudit-common.md5sums, /var/lib/dpkg/info/libaudit-common.list", + "supplier": "NOASSERTION", + "versionInfo": "1:3.1.2-2.1build1.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libaudit1-e653b715519534d5", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libaudit1:libaudit1:1\\:3.1.2-2.1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libaudit1@1%3A3.1.2-2.1build1.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=audit", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-1.0-only AND GPL-2.0-only AND LGPL-2.1-only", + "name": "libaudit1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libaudit1/copyright, /var/lib/dpkg/info/libaudit1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1:3.1.2-2.1build1.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libblkid1-f15236cf9379103e", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libblkid1:libblkid1:2.39.3-9ubuntu6.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libblkid1@2.39.3-9ubuntu6.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=util-linux", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND BSD-4-Clause AND LicenseRef-BSLA AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "name": "libblkid1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libblkid1/copyright, /var/lib/dpkg/info/libblkid1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.39.3-9ubuntu6.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-libbrotli1-bf0b5dc9ecd638c2", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libbrotli1:libbrotli1:1.1.0-2build2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libbrotli1@1.1.0-2build2?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=brotli", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "MIT", + "name": "libbrotli1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libbrotli1/copyright, /var/lib/dpkg/info/libbrotli1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.1.0-2build2" + }, + { + "SPDXID": "SPDXRef-Package-deb-libbsd0-b4e1114299530db5", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libbsd0:libbsd0:0.12.1-1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libbsd0@0.12.1-1build1.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libbsd", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND BSD-2-Clause AND LicenseRef-BSD-2-clause-author AND LicenseRef-BSD-2-clause-verbatim AND BSD-3-Clause AND LicenseRef-BSD-3-clause-John-Birrell AND LicenseRef-BSD-3-clause-Regents AND LicenseRef-BSD-3-clause-author AND LicenseRef-BSD-5-clause-Peter-Wemm AND Beerware AND LicenseRef-Expat AND ISC AND LicenseRef-ISC-Original AND LicenseRef-public-domain", + "name": "libbsd0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libbsd0/copyright, /var/lib/dpkg/info/libbsd0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "0.12.1-1build1.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libbz2-1.0-c666aef9f22ed237", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.8-5.1build0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libbz2-1.0:libbz2_1.0:1.0.8-5.1build0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libbz2_1.0:libbz2-1.0:1.0.8-5.1build0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libbz2_1.0:libbz2_1.0:1.0.8-5.1build0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libbz2:libbz2-1.0:1.0.8-5.1build0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libbz2:libbz2_1.0:1.0.8-5.1build0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libbz2-1.0@1.0.8-5.1build0.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=bzip2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-BSD-variant AND GPL-2.0-only", + "name": "libbz2-1.0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libbz2-1.0/copyright, /var/lib/dpkg/info/libbz2-1.0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.0.8-5.1build0.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libc-bin-42c35c4c16725be7", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libc-bin:libc-bin:2.39-0ubuntu8.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libc-bin:libc_bin:2.39-0ubuntu8.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libc_bin:libc-bin:2.39-0ubuntu8.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libc_bin:libc_bin:2.39-0ubuntu8.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libc:libc-bin:2.39-0ubuntu8.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libc:libc_bin:2.39-0ubuntu8.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libc-bin@2.39-0ubuntu8.6?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=glibc", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GFDL-1.3-only AND GPL-2.0-only AND LGPL-2.1-only", + "name": "libc-bin", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libc-bin/copyright, /var/lib/dpkg/info/libc-bin.conffiles, /var/lib/dpkg/info/libc-bin.md5sums, /var/lib/dpkg/info/libc-bin.list, /var/lib/dpkg/info/libc-bin.postinst, /var/lib/dpkg/info/libc-bin.triggers", + "supplier": "NOASSERTION", + "versionInfo": "2.39-0ubuntu8.6" + }, + { + "SPDXID": "SPDXRef-Package-deb-libc6-3db3e8698c7ab8e5", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libc6:libc6:2.39-0ubuntu8.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libc6@2.39-0ubuntu8.6?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=glibc", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GFDL-1.3-only AND GPL-2.0-only AND LGPL-2.1-only", + "name": "libc6", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libc6/copyright, /var/lib/dpkg/info/libc6:amd64.conffiles, /var/lib/dpkg/info/libc6:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.39-0ubuntu8.6" + }, + { + "SPDXID": "SPDXRef-Package-deb-libcap-ng0-43674d423f707706", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcap-ng0:libcap-ng0:0.8.4-2build2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcap-ng0:libcap_ng0:0.8.4-2build2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcap_ng0:libcap-ng0:0.8.4-2build2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcap_ng0:libcap_ng0:0.8.4-2build2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcap:libcap-ng0:0.8.4-2build2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcap:libcap_ng0:0.8.4-2build2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libcap-ng0@0.8.4-2build2?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libcap-ng", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND LGPL-2.1-only AND LGPL-2.1-or-later", + "name": "libcap-ng0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libcap-ng0/copyright, /var/lib/dpkg/info/libcap-ng0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "0.8.4-2build2" + }, + { + "SPDXID": "SPDXRef-Package-deb-libcap2-69e7069bcc12bfaa", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcap2:libcap2:1\\:2.66-5ubuntu2.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libcap2@1%3A2.66-5ubuntu2.2?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later", + "name": "libcap2", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libcap2/copyright, /var/lib/dpkg/info/libcap2:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1:2.66-5ubuntu2.2" + }, + { + "SPDXID": "SPDXRef-Package-deb-libcom-err2-fb8ba7593ed05875", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcom-err2:libcom-err2:1.47.0-2.4\\~exp1ubuntu4.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcom-err2:libcom_err2:1.47.0-2.4\\~exp1ubuntu4.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcom_err2:libcom-err2:1.47.0-2.4\\~exp1ubuntu4.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcom_err2:libcom_err2:1.47.0-2.4\\~exp1ubuntu4.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcom:libcom-err2:1.47.0-2.4\\~exp1ubuntu4.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcom:libcom_err2:1.47.0-2.4\\~exp1ubuntu4.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libcom-err2@1.47.0-2.4~exp1ubuntu4.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=e2fsprogs", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "Apache-2.0 AND Apache-2.0 AND BSD-3-Clause AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND ISC AND Kazlib AND LGPL-2.0-only AND Latex2e", + "name": "libcom-err2", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libcom-err2/copyright, /var/lib/dpkg/info/libcom-err2:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.47.0-2.4~exp1ubuntu4.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libcrypt1-7172158587c8e198", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcrypt1:libcrypt1:1\\:4.4.36-4build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libcrypt1@1%3A4.4.36-4build1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libxcrypt", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "LicenseRef-5a5e7ca0e9f3f9679977e3a3e9ede45ad92885a3297ea78e766979f9866c5a16", + "licenseDeclared": "NOASSERTION", + "name": "libcrypt1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libcrypt1/copyright, /var/lib/dpkg/info/libcrypt1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1:4.4.36-4build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libcurl4t64-83f0f2255ea803f0", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libcurl4t64:libcurl4t64:8.5.0-2ubuntu10.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libcurl4t64@8.5.0-2ubuntu10.6?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=curl", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND FSFULLR AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND ISC AND OLDAP-2.8 AND X11 AND curl", + "name": "libcurl4t64", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libcurl4t64/copyright, /var/lib/dpkg/info/libcurl4t64:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "8.5.0-2ubuntu10.6" + }, + { + "SPDXID": "SPDXRef-Package-deb-libdb5.3t64-cf8f897d0000aeb5", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libdb5.3t64:libdb5.3t64:5.3.28\\+dfsg2-7:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libdb5.3t64@5.3.28%2Bdfsg2-7?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=db5.3", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-Artistic AND BSD-3-Clause AND LicenseRef-BSD-3-clause-fjord AND LicenseRef-GPL AND GPL-3.0-only AND LicenseRef-MIT-old AND MS-PL AND Sleepycat AND LicenseRef-TCL-like AND X11 AND Zlib", + "name": "libdb5.3t64", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libdb5.3t64/copyright, /var/lib/dpkg/info/libdb5.3t64:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "5.3.28+dfsg2-7" + }, + { + "SPDXID": "SPDXRef-Package-deb-libdebconfclient0-60bdcb0a15567bb2", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.271ubuntu3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libdebconfclient0@0.271ubuntu3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=cdebconf", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND BSD-2-Clause AND GPL-2.0-only AND GPL-2.0-or-later", + "name": "libdebconfclient0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libdebconfclient0/copyright, /var/lib/dpkg/info/libdebconfclient0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "0.271ubuntu3" + }, + { + "SPDXID": "SPDXRef-Package-deb-libext2fs2t64-53e7d98a0dbe6336", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libext2fs2t64:libext2fs2t64:1.47.0-2.4\\~exp1ubuntu4.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libext2fs2t64@1.47.0-2.4~exp1ubuntu4.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=e2fsprogs", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "Apache-2.0 AND Apache-2.0 AND BSD-3-Clause AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND ISC AND Kazlib AND LGPL-2.0-only AND Latex2e", + "name": "libext2fs2t64", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libext2fs2t64/copyright, /var/lib/dpkg/info/libext2fs2t64:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.47.0-2.4~exp1ubuntu4.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libffi8-10f8f209c4e6c059", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libffi8:libffi8:3.4.6-1build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libffi8@3.4.6-1build1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libffi", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-Expat AND LicenseRef-GPL AND GPL-2.0-or-later AND GPL-3.0-or-later AND MPL-1.1 AND X11 AND LicenseRef-public-domain", + "name": "libffi8", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libffi8/copyright, /var/lib/dpkg/info/libffi8:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "3.4.6-1build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libgcc-s1-8e11f1cdecd937b2", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgcc-s1:libgcc-s1:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgcc-s1:libgcc_s1:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgcc_s1:libgcc-s1:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgcc_s1:libgcc_s1:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgcc:libgcc-s1:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgcc:libgcc_s1:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libgcc-s1@14.2.0-4ubuntu2~24.04?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gcc-14", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-Artistic AND GFDL-1.2-only AND LicenseRef-GPL AND GPL-3.0-only AND LicenseRef-LGPL", + "name": "libgcc-s1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gcc-14-base/copyright, /var/lib/dpkg/info/libgcc-s1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "14.2.0-4ubuntu2~24.04" + }, + { + "SPDXID": "SPDXRef-Package-deb-libgcrypt20-30a91a85b60f0068", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgcrypt20:libgcrypt20:1.10.3-2build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libgcrypt20@1.10.3-2build1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND LicenseRef-LGPL", + "name": "libgcrypt20", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libgcrypt20/copyright, /var/lib/dpkg/info/libgcrypt20:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.10.3-2build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libgmp10-29bd0be0c60b882d", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgmp10:libgmp10:2\\:6.3.0\\+dfsg-2ubuntu6.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libgmp10@2%3A6.3.0%2Bdfsg-2ubuntu6.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gmp", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later", + "name": "libgmp10", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libgmp10/copyright, /var/lib/dpkg/info/libgmp10:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2:6.3.0+dfsg-2ubuntu6.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libgnutls30t64-9536300c90fd50b2", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgnutls30t64:libgnutls30t64:3.8.3-1.1ubuntu3.4:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libgnutls30t64@3.8.3-1.1ubuntu3.4?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gnutls28", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "Apache-2.0 AND BSD-3-Clause AND LicenseRef-CC0 AND LicenseRef-Expat AND GFDL-1.3-only AND LicenseRef-GPL AND GPL-3.0-only AND LicenseRef-GPLv3- AND LicenseRef-LGPL AND LGPL-3.0-only AND LicenseRef-LGPLv2.1- AND LicenseRef-LGPLv3--or-GPLv2- AND LicenseRef-The", + "name": "libgnutls30t64", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libgnutls30t64/copyright, /var/lib/dpkg/info/libgnutls30t64:amd64.conffiles, /var/lib/dpkg/info/libgnutls30t64:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "3.8.3-1.1ubuntu3.4" + }, + { + "SPDXID": "SPDXRef-Package-deb-libgpg-error0-efbbad5e3c6a8959", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgpg-error0:libgpg-error0:1.47-3build2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgpg-error0:libgpg_error0:1.47-3build2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgpg_error0:libgpg-error0:1.47-3build2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgpg_error0:libgpg_error0:1.47-3build2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgpg:libgpg-error0:1.47-3build2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgpg:libgpg_error0:1.47-3build2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libgpg-error0@1.47-3build2.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libgpg-error", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-g10-permissive", + "name": "libgpg-error0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libgpg-error0/copyright, /var/lib/dpkg/info/libgpg-error0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.47-3build2.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libgssapi-krb5-2-969bf6cc3ae38f50", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libgssapi-krb5-2@1.20.1-6ubuntu2.6?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=krb5", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only", + "name": "libgssapi-krb5-2", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libgssapi-krb5-2/copyright, /var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.20.1-6ubuntu2.6" + }, + { + "SPDXID": "SPDXRef-Package-deb-libhogweed6t64-c722c6f50cc79f5c", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libhogweed6t64:libhogweed6t64:3.9.1-2.2build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libhogweed6t64@3.9.1-2.2build1.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=nettle", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-Expat AND LicenseRef-GAP AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-3.0-or-later AND LicenseRef-public-domain", + "name": "libhogweed6t64", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libhogweed6t64/copyright, /var/lib/dpkg/info/libhogweed6t64:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "3.9.1-2.2build1.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libidn2-0-63f5d592d570cb05", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libidn2-0:libidn2-0:2.3.7-2build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libidn2-0:libidn2_0:2.3.7-2build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libidn2_0:libidn2-0:2.3.7-2build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libidn2_0:libidn2_0:2.3.7-2build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libidn2:libidn2-0:2.3.7-2build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libidn2:libidn2_0:2.3.7-2build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libidn2-0@2.3.7-2build1.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libidn2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-Unicode", + "name": "libidn2-0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libidn2-0/copyright, /var/lib/dpkg/info/libidn2-0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.3.7-2build1.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libjq1-654c8436ec8d155a", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libjq1:libjq1:1.7.1-3ubuntu0.24.04.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libjq1@1.7.1-3ubuntu0.24.04.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=jq", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "CC-BY-3.0 AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later AND MIT", + "name": "libjq1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libjq1/copyright, /var/lib/dpkg/info/libjq1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.7.1-3ubuntu0.24.04.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libk5crypto3-edcbf456749be91c", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libk5crypto3:libk5crypto3:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libk5crypto3@1.20.1-6ubuntu2.6?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=krb5", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only", + "name": "libk5crypto3", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libk5crypto3/copyright, /var/lib/dpkg/info/libk5crypto3:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.20.1-6ubuntu2.6" + }, + { + "SPDXID": "SPDXRef-Package-deb-libkeyutils1-215205ffd55438a3", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libkeyutils1:libkeyutils1:1.6.3-3build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libkeyutils1@1.6.3-3build1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=keyutils", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later", + "name": "libkeyutils1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libkeyutils1/copyright, /var/lib/dpkg/info/libkeyutils1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.6.3-3build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libkmod2-3b347aca17c8940d", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libkmod2:libkmod2:31\\+20240202-2ubuntu7.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libkmod2@31%2B20240202-2ubuntu7.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=kmod", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later", + "name": "libkmod2", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libkmod2/copyright, /var/lib/dpkg/info/libkmod2:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "31+20240202-2ubuntu7.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libkrb5-3-c724245069d911ce", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libkrb5-3:libkrb5-3:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libkrb5-3:libkrb5_3:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libkrb5_3:libkrb5-3:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libkrb5_3:libkrb5_3:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libkrb5:libkrb5-3:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libkrb5:libkrb5_3:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libkrb5-3@1.20.1-6ubuntu2.6?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=krb5", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only", + "name": "libkrb5-3", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libkrb5-3/copyright, /var/lib/dpkg/info/libkrb5-3:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.20.1-6ubuntu2.6" + }, + { + "SPDXID": "SPDXRef-Package-deb-libkrb5support0-0763a05c0850fbda", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libkrb5support0:libkrb5support0:1.20.1-6ubuntu2.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libkrb5support0@1.20.1-6ubuntu2.6?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=krb5", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only", + "name": "libkrb5support0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libkrb5support0/copyright, /var/lib/dpkg/info/libkrb5support0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.20.1-6ubuntu2.6" + }, + { + "SPDXID": "SPDXRef-Package-deb-libksba8-c814f748c2466e73", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libksba8:libksba8:1.6.6-1build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libksba8@1.6.6-1build1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libksba", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "FSFUL AND GPL-3.0-only AND LGPL-2.1-or-later", + "name": "libksba8", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libksba8/copyright, /var/lib/dpkg/info/libksba8:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.6.6-1build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libldap-common-de5d444e197833e3", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libldap-common:libldap-common:2.6.7\\+dfsg-1\\~exp1ubuntu8.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libldap-common:libldap_common:2.6.7\\+dfsg-1\\~exp1ubuntu8.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libldap_common:libldap-common:2.6.7\\+dfsg-1\\~exp1ubuntu8.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libldap_common:libldap_common:2.6.7\\+dfsg-1\\~exp1ubuntu8.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libldap:libldap-common:2.6.7\\+dfsg-1\\~exp1ubuntu8.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libldap:libldap_common:2.6.7\\+dfsg-1\\~exp1ubuntu8.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libldap-common@2.6.7%2Bdfsg-1~exp1ubuntu8.2?arch=all\u0026distro=ubuntu-24.04\u0026upstream=openldap", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-BSD-3-clause-California AND LicenseRef-BSD-3-clause-variant AND LicenseRef-BSD-4-clause-California AND Beerware AND LicenseRef-Expat AND LicenseRef-Expat-ISC AND LicenseRef-Expat-UNM AND LicenseRef-F5 AND LicenseRef-FSF-unlimited AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-JCG AND LicenseRef-MIT-XC AND LicenseRef-NeoSoft-permissive AND LicenseRef-OpenLDAP-2.8 AND LicenseRef-UMich AND LicenseRef-public-domain", + "name": "libldap-common", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libldap-common/copyright, /var/lib/dpkg/info/libldap-common.conffiles, /var/lib/dpkg/info/libldap-common.md5sums, /var/lib/dpkg/info/libldap-common.list", + "supplier": "NOASSERTION", + "versionInfo": "2.6.7+dfsg-1~exp1ubuntu8.2" + }, + { + "SPDXID": "SPDXRef-Package-deb-libldap2-01151935dbb3bc27", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libldap2:libldap2:2.6.7\\+dfsg-1\\~exp1ubuntu8.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libldap2@2.6.7%2Bdfsg-1~exp1ubuntu8.2?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=openldap", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-BSD-3-clause-California AND LicenseRef-BSD-3-clause-variant AND LicenseRef-BSD-4-clause-California AND Beerware AND LicenseRef-Expat AND LicenseRef-Expat-ISC AND LicenseRef-Expat-UNM AND LicenseRef-F5 AND LicenseRef-FSF-unlimited AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-JCG AND LicenseRef-MIT-XC AND LicenseRef-NeoSoft-permissive AND LicenseRef-OpenLDAP-2.8 AND LicenseRef-UMich AND LicenseRef-public-domain", + "name": "libldap2", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libldap2/copyright, /var/lib/dpkg/info/libldap2:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.6.7+dfsg-1~exp1ubuntu8.2" + }, + { + "SPDXID": "SPDXRef-Package-deb-liblz4-1-6e784e6498f9f850", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:liblz4-1:liblz4-1:1.9.4-1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:liblz4-1:liblz4_1:1.9.4-1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:liblz4_1:liblz4-1:1.9.4-1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:liblz4_1:liblz4_1:1.9.4-1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:liblz4:liblz4-1:1.9.4-1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:liblz4:liblz4_1:1.9.4-1build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/liblz4-1@1.9.4-1build1.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=lz4", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND GPL-2.0-only AND GPL-2.0-or-later", + "name": "liblz4-1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/liblz4-1/copyright, /var/lib/dpkg/info/liblz4-1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.9.4-1build1.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-liblzma5-993af967e1703550", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:liblzma5:liblzma5:5.6.1\\+really5.4.5-1ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/liblzma5@5.6.1%2Breally5.4.5-1ubuntu0.2?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=xz-utils", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-Autoconf AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-PD AND LicenseRef-PD-debian AND LicenseRef-config-h AND LicenseRef-noderivs AND LicenseRef-permissive-fsf AND LicenseRef-permissive-nowarranty AND LicenseRef-probably-PD", + "name": "liblzma5", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/liblzma5/copyright, /var/lib/dpkg/info/liblzma5:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "5.6.1+really5.4.5-1ubuntu0.2" + }, + { + "SPDXID": "SPDXRef-Package-deb-libmd0-06315b75244db9d9", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libmd0:libmd0:1.1.0-2build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libmd0@1.1.0-2build1.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libmd", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND BSD-2-Clause AND BSD-3-Clause AND LicenseRef-BSD-3-clause-Aaron-D-Gifford AND Beerware AND ISC AND LicenseRef-public-domain-md4 AND LicenseRef-public-domain-md5 AND LicenseRef-public-domain-sha1", + "name": "libmd0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libmd0/copyright, /var/lib/dpkg/info/libmd0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.1.0-2build1.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libmount1-3d9e8c3569192da0", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libmount1:libmount1:2.39.3-9ubuntu6.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libmount1@2.39.3-9ubuntu6.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=util-linux", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND BSD-4-Clause AND LicenseRef-BSLA AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "name": "libmount1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libmount1/copyright, /var/lib/dpkg/info/libmount1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.39.3-9ubuntu6.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-libncursesw6-18ce0375cc5bec3f", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libncursesw6:libncursesw6:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libncursesw6@6.4%2B20240113-1ubuntu2?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=ncurses", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "name": "libncursesw6", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libtinfo6/copyright, /var/lib/dpkg/info/libncursesw6:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "6.4+20240113-1ubuntu2" + }, + { + "SPDXID": "SPDXRef-Package-deb-libnettle8t64-d88cbda49b1ae309", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libnettle8t64:libnettle8t64:3.9.1-2.2build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libnettle8t64@3.9.1-2.2build1.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=nettle", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-Expat AND LicenseRef-GAP AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-3.0-or-later AND LicenseRef-public-domain", + "name": "libnettle8t64", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libnettle8t64/copyright, /var/lib/dpkg/info/libnettle8t64:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "3.9.1-2.2build1.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libnghttp2-14-b0cb99f4a02e3240", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.59.0-1ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libnghttp2-14:libnghttp2_14:1.59.0-1ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libnghttp2_14:libnghttp2-14:1.59.0-1ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libnghttp2_14:libnghttp2_14:1.59.0-1ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libnghttp2:libnghttp2-14:1.59.0-1ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libnghttp2:libnghttp2_14:1.59.0-1ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libnghttp2-14@1.59.0-1ubuntu0.2?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=nghttp2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND LicenseRef-Expat AND GPL-3.0-only AND GPL-3.0-or-later AND MIT AND LicenseRef-all-permissive", + "name": "libnghttp2-14", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libnghttp2-14/copyright, /var/lib/dpkg/info/libnghttp2-14:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.59.0-1ubuntu0.2" + }, + { + "SPDXID": "SPDXRef-Package-deb-libnpth0t64-1d0c9c323ca55261", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libnpth0t64:libnpth0t64:1.6-3.1build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libnpth0t64@1.6-3.1build1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=npth", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LGPL-2.1-only AND LGPL-2.1-or-later", + "name": "libnpth0t64", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libnpth0t64/copyright, /var/lib/dpkg/info/libnpth0t64:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.6-3.1build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libonig5-c759ee0b7800206d", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libonig5:libonig5:6.9.9-1build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libonig5@6.9.9-1build1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libonig", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND GPL-2.0-only AND GPL-2.0-or-later", + "name": "libonig5", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libonig5/copyright, /var/lib/dpkg/info/libonig5:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "6.9.9-1build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libp11-kit0-0ff6c45a645ef14b", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libp11-kit0:libp11-kit0:0.25.3-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libp11-kit0:libp11_kit0:0.25.3-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libp11_kit0:libp11-kit0:0.25.3-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libp11_kit0:libp11_kit0:0.25.3-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libp11:libp11-kit0:0.25.3-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libp11:libp11_kit0:0.25.3-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libp11-kit0@0.25.3-4ubuntu2.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=p11-kit", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "Apache-2.0 AND BSD-3-Clause AND FSFAP AND FSFULLR AND GPL-2.0-or-later AND GPL-3.0-or-later AND ISC AND LGPL-2.1-only AND LGPL-2.1-or-later AND X11 AND LicenseRef-customFSFUL AND LicenseRef-customFSFULLRWD", + "name": "libp11-kit0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libp11-kit0/copyright, /var/lib/dpkg/info/libp11-kit0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "0.25.3-4ubuntu2.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libpam-modules-8f4cf9baab26d4f0", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam-modules:libpam-modules:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam-modules:libpam_modules:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam_modules:libpam-modules:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam_modules:libpam_modules:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam:libpam-modules:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam:libpam_modules:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libpam-modules@1.5.3-5ubuntu5.5?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=pam", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-BSD-tcp-wrappers AND Beerware AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later AND LicenseRef-public-domain", + "name": "libpam-modules", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libpam-modules/copyright, /var/lib/dpkg/info/libpam-modules:amd64.conffiles, /var/lib/dpkg/info/libpam-modules:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.5.3-5ubuntu5.5" + }, + { + "SPDXID": "SPDXRef-Package-deb-libpam-modules-bin-c322cb2c91836caa", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam-modules-bin:libpam_modules_bin:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam_modules_bin:libpam-modules-bin:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam_modules_bin:libpam_modules_bin:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam-modules:libpam-modules-bin:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam-modules:libpam_modules_bin:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam_modules:libpam-modules-bin:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam_modules:libpam_modules_bin:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam:libpam-modules-bin:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam:libpam_modules_bin:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libpam-modules-bin@1.5.3-5ubuntu5.5?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=pam", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-BSD-tcp-wrappers AND Beerware AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later AND LicenseRef-public-domain", + "name": "libpam-modules-bin", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libpam-modules-bin/copyright, /var/lib/dpkg/info/libpam-modules-bin.md5sums, /var/lib/dpkg/info/libpam-modules-bin.list, /var/lib/dpkg/info/libpam-modules-bin.postinst, /var/lib/dpkg/info/libpam-modules-bin.postrm, /var/lib/dpkg/info/libpam-modules-bin.prerm", + "supplier": "NOASSERTION", + "versionInfo": "1.5.3-5ubuntu5.5" + }, + { + "SPDXID": "SPDXRef-Package-deb-libpam-runtime-d04a485a523784c8", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam-runtime:libpam-runtime:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam-runtime:libpam_runtime:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam_runtime:libpam-runtime:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam_runtime:libpam_runtime:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam:libpam-runtime:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam:libpam_runtime:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libpam-runtime@1.5.3-5ubuntu5.5?arch=all\u0026distro=ubuntu-24.04\u0026upstream=pam", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-BSD-tcp-wrappers AND Beerware AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later AND LicenseRef-public-domain", + "name": "libpam-runtime", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libpam-runtime/copyright, /var/lib/dpkg/info/libpam-runtime.conffiles, /var/lib/dpkg/info/libpam-runtime.md5sums, /var/lib/dpkg/info/libpam-runtime.list, /var/lib/dpkg/info/libpam-runtime.postinst, /var/lib/dpkg/info/libpam-runtime.postrm, /var/lib/dpkg/info/libpam-runtime.prerm, /var/lib/dpkg/info/libpam-runtime.templates", + "supplier": "NOASSERTION", + "versionInfo": "1.5.3-5ubuntu5.5" + }, + { + "SPDXID": "SPDXRef-Package-deb-libpam0g-9aa31bc48b99a584", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpam0g:libpam0g:1.5.3-5ubuntu5.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libpam0g@1.5.3-5ubuntu5.5?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=pam", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-BSD-tcp-wrappers AND Beerware AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later AND LicenseRef-public-domain", + "name": "libpam0g", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libpam0g/copyright, /var/lib/dpkg/info/libpam0g:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.5.3-5ubuntu5.5" + }, + { + "SPDXID": "SPDXRef-Package-deb-libpcre2-8-0-af95be31c1ad9110", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.42-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpcre2-8-0:libpcre2_8_0:10.42-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpcre2_8_0:libpcre2-8-0:10.42-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpcre2_8_0:libpcre2_8_0:10.42-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpcre2-8:libpcre2-8-0:10.42-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpcre2-8:libpcre2_8_0:10.42-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpcre2_8:libpcre2-8-0:10.42-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpcre2_8:libpcre2_8_0:10.42-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpcre2:libpcre2-8-0:10.42-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpcre2:libpcre2_8_0:10.42-4ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libpcre2-8-0@10.42-4ubuntu2.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=pcre2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND LicenseRef-BSD-3-clause-Cambridge AND X11 AND LicenseRef-public-domain", + "name": "libpcre2-8-0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libpcre2-8-0/copyright, /var/lib/dpkg/info/libpcre2-8-0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "10.42-4ubuntu2.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libproc2-0-8d56c9067034ebc8", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libproc2-0:libproc2-0:2\\:4.0.4-4ubuntu3.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libproc2-0:libproc2_0:2\\:4.0.4-4ubuntu3.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libproc2_0:libproc2-0:2\\:4.0.4-4ubuntu3.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libproc2_0:libproc2_0:2\\:4.0.4-4ubuntu3.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libproc2:libproc2-0:2\\:4.0.4-4ubuntu3.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libproc2:libproc2_0:2\\:4.0.4-4ubuntu3.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libproc2-0@2%3A4.0.4-4ubuntu3.2?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=procps", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later", + "name": "libproc2-0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libproc2-0/copyright, /var/lib/dpkg/info/libproc2-0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2:4.0.4-4ubuntu3.2" + }, + { + "SPDXID": "SPDXRef-Package-deb-libpsl5t64-73ae8411461ffd84", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libpsl5t64:libpsl5t64:0.21.2-1.1build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libpsl5t64@0.21.2-1.1build1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libpsl", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-Chromium AND MIT AND LicenseRef-gnulib", + "name": "libpsl5t64", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libpsl5t64/copyright, /var/lib/dpkg/info/libpsl5t64:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "0.21.2-1.1build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libreadline8t64-6eb286d41d2bfb01", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libreadline8t64:libreadline8t64:8.2-4build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libreadline8t64@8.2-4build1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=readline", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-GFDL AND LicenseRef-GFDL-NIV-1.3- AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-ISC-no-attribution", + "name": "libreadline8t64", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libreadline8t64/copyright, /var/lib/dpkg/info/libreadline8t64:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "8.2-4build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-librtmp1-81955549e95a42d3", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:librtmp1:librtmp1:2.4\\+20151223.gitfa8646d.1-2build7:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/librtmp1@2.4%2B20151223.gitfa8646d.1-2build7?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=rtmpdump", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND LGPL-2.1-only", + "name": "librtmp1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/librtmp1/copyright, /var/lib/dpkg/info/librtmp1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.4+20151223.gitfa8646d.1-2build7" + }, + { + "SPDXID": "SPDXRef-Package-deb-libsasl2-2-c63c50e09a049480", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2-2:libsasl2_2:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2_2:libsasl2-2:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2_2:libsasl2_2:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2:libsasl2-2:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2:libsasl2_2:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libsasl2-2@2.1.28%2Bdfsg1-5ubuntu3.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=cyrus-sasl2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND LicenseRef-BSD-2.2-clause AND BSD-3-Clause-Attribution AND BSD-3-Clause AND LicenseRef-BSD-3-clause-JANET AND LicenseRef-BSD-3-clause-PADL AND BSD-4-Clause-UC AND FSFULLR AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-IBM-as-is AND MIT-CMU AND LicenseRef-MIT-Export AND LicenseRef-MIT-OpenVision AND LicenseRef-OpenLDAP AND RSA-MD", + "name": "libsasl2-2", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libsasl2-2/copyright, /var/lib/dpkg/info/libsasl2-2:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.1.28+dfsg1-5ubuntu3.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libsasl2-modules-eb9654976cb9d0e2", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2-modules:libsasl2-modules:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2-modules:libsasl2_modules:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2_modules:libsasl2-modules:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2_modules:libsasl2_modules:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2:libsasl2-modules:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2:libsasl2_modules:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libsasl2-modules@2.1.28%2Bdfsg1-5ubuntu3.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=cyrus-sasl2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND LicenseRef-BSD-2.2-clause AND BSD-3-Clause-Attribution AND BSD-3-Clause AND LicenseRef-BSD-3-clause-JANET AND LicenseRef-BSD-3-clause-PADL AND BSD-4-Clause-UC AND FSFULLR AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-IBM-as-is AND MIT-CMU AND LicenseRef-MIT-Export AND LicenseRef-MIT-OpenVision AND LicenseRef-OpenLDAP AND RSA-MD", + "name": "libsasl2-modules", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libsasl2-modules/copyright, /var/lib/dpkg/info/libsasl2-modules:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.1.28+dfsg1-5ubuntu3.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libsasl2-modules-db-cd1ded1d948407f7", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2-modules-db:libsasl2_modules_db:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2_modules_db:libsasl2-modules-db:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2_modules_db:libsasl2_modules_db:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2-modules:libsasl2-modules-db:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2-modules:libsasl2_modules_db:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2_modules:libsasl2-modules-db:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2_modules:libsasl2_modules_db:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2:libsasl2-modules-db:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsasl2:libsasl2_modules_db:2.1.28\\+dfsg1-5ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libsasl2-modules-db@2.1.28%2Bdfsg1-5ubuntu3.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=cyrus-sasl2", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND LicenseRef-BSD-2.2-clause AND BSD-3-Clause-Attribution AND BSD-3-Clause AND LicenseRef-BSD-3-clause-JANET AND LicenseRef-BSD-3-clause-PADL AND BSD-4-Clause-UC AND FSFULLR AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-IBM-as-is AND MIT-CMU AND LicenseRef-MIT-Export AND LicenseRef-MIT-OpenVision AND LicenseRef-OpenLDAP AND RSA-MD", + "name": "libsasl2-modules-db", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libsasl2-modules-db/copyright, /var/lib/dpkg/info/libsasl2-modules-db:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.1.28+dfsg1-5ubuntu3.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libseccomp2-3ba2629eadb8e304", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libseccomp2:libseccomp2:2.5.5-1ubuntu3.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libseccomp2@2.5.5-1ubuntu3.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libseccomp", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LGPL-2.1-only", + "name": "libseccomp2", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libseccomp2/copyright, /var/lib/dpkg/info/libseccomp2:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.5.5-1ubuntu3.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libselinux1-cb2b78b10156ba3f", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libselinux1:libselinux1:3.5-2ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libselinux1@3.5-2ubuntu2.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libselinux", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND LicenseRef-public-domain", + "name": "libselinux1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libselinux1/copyright, /var/lib/dpkg/info/libselinux1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "3.5-2ubuntu2.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libsemanage-common-d1402e013c1e2f83", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsemanage-common:libsemanage-common:3.5-1build5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsemanage-common:libsemanage_common:3.5-1build5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsemanage_common:libsemanage-common:3.5-1build5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsemanage_common:libsemanage_common:3.5-1build5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsemanage:libsemanage-common:3.5-1build5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsemanage:libsemanage_common:3.5-1build5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libsemanage-common@3.5-1build5?arch=all\u0026distro=ubuntu-24.04\u0026upstream=libsemanage", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND LGPL-2.1-only AND LGPL-2.1-or-later", + "name": "libsemanage-common", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libsemanage-common/copyright, /var/lib/dpkg/info/libsemanage-common.conffiles, /var/lib/dpkg/info/libsemanage-common.md5sums, /var/lib/dpkg/info/libsemanage-common.list", + "supplier": "NOASSERTION", + "versionInfo": "3.5-1build5" + }, + { + "SPDXID": "SPDXRef-Package-deb-libsemanage2-e0cbcfc82f8353e2", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsemanage2:libsemanage2:3.5-1build5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libsemanage2@3.5-1build5?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libsemanage", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND LGPL-2.1-only AND LGPL-2.1-or-later", + "name": "libsemanage2", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libsemanage2/copyright, /var/lib/dpkg/info/libsemanage2:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "3.5-1build5" + }, + { + "SPDXID": "SPDXRef-Package-deb-libsepol2-15a811c4d04d7867", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsepol2:libsepol2:3.5-2build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libsepol2@3.5-2build1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libsepol", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND Zlib", + "name": "libsepol2", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libsepol2/copyright, /var/lib/dpkg/info/libsepol2:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "3.5-2build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libsmartcols1-3bb3f9371c052b11", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsmartcols1:libsmartcols1:2.39.3-9ubuntu6.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libsmartcols1@2.39.3-9ubuntu6.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=util-linux", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND BSD-4-Clause AND LicenseRef-BSLA AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "name": "libsmartcols1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libsmartcols1/copyright, /var/lib/dpkg/info/libsmartcols1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.39.3-9ubuntu6.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-libsqlite3-0-200ea9e4747ef477", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.45.1-1ubuntu2.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.45.1-1ubuntu2.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.45.1-1ubuntu2.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.45.1-1ubuntu2.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsqlite3:libsqlite3-0:3.45.1-1ubuntu2.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsqlite3:libsqlite3_0:3.45.1-1ubuntu2.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libsqlite3-0@3.45.1-1ubuntu2.5?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=sqlite3", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-public-domain", + "name": "libsqlite3-0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libsqlite3-0/copyright, /var/lib/dpkg/info/libsqlite3-0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "3.45.1-1ubuntu2.5" + }, + { + "SPDXID": "SPDXRef-Package-deb-libss2-15654eba4be88b15", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libss2:libss2:1.47.0-2.4\\~exp1ubuntu4.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libss2@1.47.0-2.4~exp1ubuntu4.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=e2fsprogs", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "Apache-2.0 AND Apache-2.0 AND BSD-3-Clause AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND ISC AND Kazlib AND LGPL-2.0-only AND Latex2e", + "name": "libss2", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libss2/copyright, /var/lib/dpkg/info/libss2:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.47.0-2.4~exp1ubuntu4.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libssh-4-cb7686798bdc7c22", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libssh-4:libssh-4:0.10.6-2ubuntu0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libssh-4:libssh_4:0.10.6-2ubuntu0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libssh_4:libssh-4:0.10.6-2ubuntu0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libssh_4:libssh_4:0.10.6-2ubuntu0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libssh:libssh-4:0.10.6-2ubuntu0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libssh:libssh_4:0.10.6-2ubuntu0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libssh-4@0.10.6-2ubuntu0.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libssh", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND LGPL-2.1-only AND LicenseRef-LGPL-2.1--OpenSSL AND LicenseRef-public-domain", + "name": "libssh-4", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libssh-4/copyright, /var/lib/dpkg/info/libssh-4:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "0.10.6-2ubuntu0.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libssl3t64-3fa99985607561a6", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libssl3t64:libssl3t64:3.0.13-0ubuntu3.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libssl3t64@3.0.13-0ubuntu3.5?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=openssl", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "Apache-2.0 AND LicenseRef-Artistic AND GPL-1.0-only AND GPL-1.0-or-later", + "name": "libssl3t64", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libssl3t64/copyright, /var/lib/dpkg/info/libssl3t64:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "3.0.13-0ubuntu3.5" + }, + { + "SPDXID": "SPDXRef-Package-deb-libstdc--6-78c7c4007f70098c", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:14.2.0-4ubuntu2\\~24.04:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libstdc%2B%2B6@14.2.0-4ubuntu2~24.04?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=gcc-14", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-Artistic AND GFDL-1.2-only AND LicenseRef-GPL AND GPL-3.0-only AND LicenseRef-LGPL", + "name": "libstdc++6", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/gcc-14-base/copyright, /var/lib/dpkg/info/libstdc++6:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "14.2.0-4ubuntu2~24.04" + }, + { + "SPDXID": "SPDXRef-Package-deb-libsystemd0-a025a5b1cdd58c85", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libsystemd0:libsystemd0:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libsystemd0@255.4-1ubuntu8.10?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=systemd", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-public-domain", + "name": "libsystemd0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libsystemd0/copyright, /var/lib/dpkg/info/libsystemd0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "255.4-1ubuntu8.10" + }, + { + "SPDXID": "SPDXRef-Package-deb-libtasn1-6-23f55ffb85c8620a", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libtasn1-6:libtasn1-6:4.19.0-3ubuntu0.24.04.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libtasn1-6:libtasn1_6:4.19.0-3ubuntu0.24.04.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libtasn1_6:libtasn1-6:4.19.0-3ubuntu0.24.04.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libtasn1_6:libtasn1_6:4.19.0-3ubuntu0.24.04.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libtasn1:libtasn1-6:4.19.0-3ubuntu0.24.04.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libtasn1:libtasn1_6:4.19.0-3ubuntu0.24.04.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libtasn1-6@4.19.0-3ubuntu0.24.04.1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GFDL-1.3-only AND GPL-3.0-only AND LicenseRef-LGPL AND LGPL-2.1-only", + "name": "libtasn1-6", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libtasn1-6/copyright, /var/lib/dpkg/info/libtasn1-6:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "4.19.0-3ubuntu0.24.04.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libtinfo6-9d92803c72cb7a13", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libtinfo6:libtinfo6:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libtinfo6@6.4%2B20240113-1ubuntu2?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=ncurses", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "name": "libtinfo6", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libtinfo6/copyright, /var/lib/dpkg/info/libtinfo6:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "6.4+20240113-1ubuntu2" + }, + { + "SPDXID": "SPDXRef-Package-deb-libudev1-c181254fb5d4b2fa", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libudev1:libudev1:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libudev1@255.4-1ubuntu8.10?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=systemd", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-public-domain", + "name": "libudev1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libudev1/copyright, /var/lib/dpkg/info/libudev1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "255.4-1ubuntu8.10" + }, + { + "SPDXID": "SPDXRef-Package-deb-libunistring5-b1cbbe8a14a0e24e", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libunistring5:libunistring5:1.1-2build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libunistring5@1.1-2build1.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libunistring", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-FreeSoftware AND GFDL-1.2-only AND LicenseRef-GFDL-NIV-1.2- AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND X11", + "name": "libunistring5", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libunistring5/copyright, /var/lib/dpkg/info/libunistring5:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.1-2build1.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libuuid1-240541a67de3e356", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libuuid1:libuuid1:2.39.3-9ubuntu6.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libuuid1@2.39.3-9ubuntu6.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=util-linux", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND BSD-4-Clause AND LicenseRef-BSLA AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "name": "libuuid1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libuuid1/copyright, /var/lib/dpkg/info/libuuid1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "2.39.3-9ubuntu6.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-libxxhash0-90eda777e40786d4", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libxxhash0:libxxhash0:0.8.2-2build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libxxhash0@0.8.2-2build1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=xxhash", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND GPL-2.0-only AND GPL-2.0-or-later", + "name": "libxxhash0", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libxxhash0/copyright, /var/lib/dpkg/info/libxxhash0:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "0.8.2-2build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-libzstd1-b3a5617e30ccb6d4", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:libzstd1:libzstd1:1.5.5\\+dfsg2-2build1.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/libzstd1@1.5.5%2Bdfsg2-2build1.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=libzstd", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-Expat AND GPL-2.0-only AND Zlib", + "name": "libzstd1", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/libzstd1/copyright, /var/lib/dpkg/info/libzstd1:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1.5.5+dfsg2-2build1.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-locales-f3b7a612072ebd9e", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:locales:locales:2.39-0ubuntu8.6:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/locales@2.39-0ubuntu8.6?arch=all\u0026distro=ubuntu-24.04\u0026upstream=glibc", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GFDL-1.3-only AND GPL-2.0-only AND LGPL-2.1-only", + "name": "locales", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/locales/copyright, /var/lib/dpkg/info/locales.conffiles, /var/lib/dpkg/info/locales.md5sums, /var/lib/dpkg/info/locales.config, /var/lib/dpkg/info/locales.list, /var/lib/dpkg/info/locales.postinst, /var/lib/dpkg/info/locales.postrm, /var/lib/dpkg/info/locales.prerm, /var/lib/dpkg/info/locales.templates", + "supplier": "NOASSERTION", + "versionInfo": "2.39-0ubuntu8.6" + }, + { + "SPDXID": "SPDXRef-Package-deb-login-271cbc4b0386e5d1", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:login:login:1\\:4.13\\+dfsg1-4ubuntu3.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/login@1%3A4.13%2Bdfsg1-4ubuntu3.2?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=shadow", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND GPL-1.0-only AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-public-domain", + "name": "login", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/login/copyright, /var/lib/dpkg/info/login.conffiles, /var/lib/dpkg/info/login.md5sums, /var/lib/dpkg/info/login.list, /var/lib/dpkg/info/login.postinst, /var/lib/dpkg/info/login.postrm, /var/lib/dpkg/info/login.preinst, /var/lib/dpkg/info/login.prerm", + "supplier": "NOASSERTION", + "versionInfo": "1:4.13+dfsg1-4ubuntu3.2" + }, + { + "SPDXID": "SPDXRef-Package-deb-logsave-7e5b554baa7836b3", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:logsave:logsave:1.47.0-2.4\\~exp1ubuntu4.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/logsave@1.47.0-2.4~exp1ubuntu4.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=e2fsprogs", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "Apache-2.0 AND Apache-2.0 AND BSD-3-Clause AND LicenseRef-GPL AND GPL-2.0-only AND GPL-2.0-or-later AND ISC AND Kazlib AND LGPL-2.0-only AND Latex2e", + "name": "logsave", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/logsave/copyright, /var/lib/dpkg/info/logsave.md5sums, /var/lib/dpkg/info/logsave.list", + "supplier": "NOASSERTION", + "versionInfo": "1.47.0-2.4~exp1ubuntu4.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-mawk-dda5c0b33cc2d2b1", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:mawk:mawk:1.3.4.20240123-1build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/mawk@1.3.4.20240123-1build1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "CC-BY-3.0 AND GPL-2.0-only AND GPL-2.0-only AND X11", + "name": "mawk", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/mawk/copyright, /var/lib/dpkg/info/mawk.md5sums, /var/lib/dpkg/info/mawk.list, /var/lib/dpkg/info/mawk.postinst, /var/lib/dpkg/info/mawk.prerm", + "supplier": "NOASSERTION", + "versionInfo": "1.3.4.20240123-1build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-mount-19d69b20b964122f", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:mount:mount:2.39.3-9ubuntu6.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/mount@2.39.3-9ubuntu6.3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=util-linux", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND BSD-4-Clause AND LicenseRef-BSLA AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "name": "mount", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/mount/copyright, /var/lib/dpkg/info/mount.md5sums, /var/lib/dpkg/info/mount.list", + "supplier": "NOASSERTION", + "versionInfo": "2.39.3-9ubuntu6.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-ncurses-base-9ce712b33a96bea6", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ncurses-base:ncurses-base:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ncurses-base:ncurses_base:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ncurses_base:ncurses-base:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ncurses_base:ncurses_base:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ncurses:ncurses-base:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ncurses:ncurses_base:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/ncurses-base@6.4%2B20240113-1ubuntu2?arch=all\u0026distro=ubuntu-24.04\u0026upstream=ncurses", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "name": "ncurses-base", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/ncurses-base/copyright, /var/lib/dpkg/info/ncurses-base.conffiles, /var/lib/dpkg/info/ncurses-base.md5sums, /var/lib/dpkg/info/ncurses-base.list", + "supplier": "NOASSERTION", + "versionInfo": "6.4+20240113-1ubuntu2" + }, + { + "SPDXID": "SPDXRef-Package-deb-ncurses-bin-e94839bb1b1744f0", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ncurses-bin:ncurses-bin:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ncurses-bin:ncurses_bin:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ncurses_bin:ncurses-bin:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ncurses_bin:ncurses_bin:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ncurses:ncurses-bin:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ncurses:ncurses_bin:6.4\\+20240113-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/ncurses-bin@6.4%2B20240113-1ubuntu2?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=ncurses", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND LicenseRef-MIT-X11 AND X11", + "name": "ncurses-bin", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/ncurses-bin/copyright, /var/lib/dpkg/info/ncurses-bin.md5sums, /var/lib/dpkg/info/ncurses-bin.list", + "supplier": "NOASSERTION", + "versionInfo": "6.4+20240113-1ubuntu2" + }, + { + "SPDXID": "SPDXRef-Package-deb-netcat-openbsd-7431acd9b45ff385", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:netcat-openbsd:netcat-openbsd:1.226-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:netcat-openbsd:netcat_openbsd:1.226-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:netcat_openbsd:netcat-openbsd:1.226-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:netcat_openbsd:netcat_openbsd:1.226-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:netcat:netcat-openbsd:1.226-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:netcat:netcat_openbsd:1.226-1ubuntu2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/netcat-openbsd@1.226-1ubuntu2?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause", + "name": "netcat-openbsd", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/netcat-openbsd/copyright, /var/lib/dpkg/info/netcat-openbsd.md5sums, /var/lib/dpkg/info/netcat-openbsd.list, /var/lib/dpkg/info/netcat-openbsd.postinst, /var/lib/dpkg/info/netcat-openbsd.prerm", + "supplier": "NOASSERTION", + "versionInfo": "1.226-1ubuntu2" + }, + { + "SPDXID": "SPDXRef-Package-deb-openssl-160cda8712132e3e", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:openssl:openssl:3.0.13-0ubuntu3.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/openssl@3.0.13-0ubuntu3.5?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "NOASSERTION", + "name": "openssl", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /var/lib/dpkg/info/openssl.conffiles, /var/lib/dpkg/info/openssl.md5sums, /var/lib/dpkg/info/openssl.list, /var/lib/dpkg/info/openssl.postinst", + "supplier": "NOASSERTION", + "versionInfo": "3.0.13-0ubuntu3.5" + }, + { + "SPDXID": "SPDXRef-Package-deb-passwd-12ce9c7a4baa2c69", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:passwd:passwd:1\\:4.13\\+dfsg1-4ubuntu3.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/passwd@1%3A4.13%2Bdfsg1-4ubuntu3.2?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=shadow", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND GPL-1.0-only AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-public-domain", + "name": "passwd", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/passwd/copyright, /var/lib/dpkg/info/passwd.conffiles, /var/lib/dpkg/info/passwd.md5sums, /var/lib/dpkg/info/passwd.list, /var/lib/dpkg/info/passwd.postinst, /var/lib/dpkg/info/passwd.postrm, /var/lib/dpkg/info/passwd.preinst, /var/lib/dpkg/info/passwd.prerm", + "supplier": "NOASSERTION", + "versionInfo": "1:4.13+dfsg1-4ubuntu3.2" + }, + { + "SPDXID": "SPDXRef-Package-deb-perl-base-96699ee758f1e615", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:perl-base:perl-base:5.38.2-3.2ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:perl-base:perl_base:5.38.2-3.2ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:perl_base:perl-base:5.38.2-3.2ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:perl_base:perl_base:5.38.2-3.2ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:perl:perl-base:5.38.2-3.2ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:perl:perl_base:5.38.2-3.2ubuntu0.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/perl-base@5.38.2-3.2ubuntu0.2?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=perl", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-Artistic AND Artistic-2.0 AND LicenseRef-Artistic-dist AND BSD-3-Clause AND LicenseRef-BSD-3-clause-GENERIC AND LicenseRef-BSD-3-clause-with-weird-numbering AND LicenseRef-BSD-4-clause-POWERDOG AND LicenseRef-BZIP AND LicenseRef-DONT-CHANGE-THE-GPL AND LicenseRef-Expat AND FSFAP AND GPL-1.0-only AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-GPL-3--WITH-BISON-EXCEPTION AND LGPL-2.1-only AND LicenseRef-REGCOMP AND LicenseRef-REGCOMP- AND LicenseRef-SDBM-PUBLIC-DOMAIN AND LicenseRef-TEXT-TABS AND LicenseRef-Unicode AND Zlib", + "name": "perl-base", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/perl-base/copyright, /var/lib/dpkg/info/perl-base.md5sums, /var/lib/dpkg/info/perl-base.list, /var/lib/dpkg/info/perl-base.postinst, /var/lib/dpkg/info/perl-base.postrm, /var/lib/dpkg/info/perl-base.preinst, /var/lib/dpkg/info/perl-base.prerm", + "supplier": "NOASSERTION", + "versionInfo": "5.38.2-3.2ubuntu0.2" + }, + { + "SPDXID": "SPDXRef-Package-deb-pinentry-curses-5b735ef7ce088c1b", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:pinentry-curses:pinentry-curses:1.2.1-3ubuntu5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:pinentry-curses:pinentry_curses:1.2.1-3ubuntu5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:pinentry_curses:pinentry-curses:1.2.1-3ubuntu5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:pinentry_curses:pinentry_curses:1.2.1-3ubuntu5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:pinentry:pinentry-curses:1.2.1-3ubuntu5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:pinentry:pinentry_curses:1.2.1-3ubuntu5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/pinentry-curses@1.2.1-3ubuntu5?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=pinentry", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND X11", + "name": "pinentry-curses", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/pinentry-curses/copyright, /var/lib/dpkg/info/pinentry-curses.md5sums, /var/lib/dpkg/info/pinentry-curses.list, /var/lib/dpkg/info/pinentry-curses.postinst, /var/lib/dpkg/info/pinentry-curses.prerm", + "supplier": "NOASSERTION", + "versionInfo": "1.2.1-3ubuntu5" + }, + { + "SPDXID": "SPDXRef-Package-deb-plexmediaserver-e1c5e29307b26db9", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:plexmediaserver:plexmediaserver:1.42.2.10156-f737b826c:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/plexmediaserver@1.42.2.10156-f737b826c?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "LicenseRef-deb63e9854058ba7c6bd843d432c7302d52070db6a7d740d309601b228d737c0", + "licenseDeclared": "NOASSERTION", + "name": "plexmediaserver", + "originator": "Person: Plex Inc (noreply@plex.tv)", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/plexmediaserver/copyright, /var/lib/dpkg/info/plexmediaserver.md5sums, /var/lib/dpkg/info/plexmediaserver.list, /var/lib/dpkg/info/plexmediaserver.postinst, /var/lib/dpkg/info/plexmediaserver.postrm, /var/lib/dpkg/info/plexmediaserver.preinst, /var/lib/dpkg/info/plexmediaserver.prerm", + "supplier": "Person: Plex Inc (noreply@plex.tv)", + "versionInfo": "1.42.2.10156-f737b826c" + }, + { + "SPDXID": "SPDXRef-Package-deb-procps-97c48d88753353e5", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:procps:procps:2\\:4.0.4-4ubuntu3.2:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/procps@2%3A4.0.4-4ubuntu3.2?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later", + "name": "procps", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/procps/copyright, /var/lib/dpkg/info/procps.conffiles, /var/lib/dpkg/info/procps.md5sums, /var/lib/dpkg/info/procps.list, /var/lib/dpkg/info/procps.postinst, /var/lib/dpkg/info/procps.postrm, /var/lib/dpkg/info/procps.preinst, /var/lib/dpkg/info/procps.prerm", + "supplier": "NOASSERTION", + "versionInfo": "2:4.0.4-4ubuntu3.2" + }, + { + "SPDXID": "SPDXRef-Package-deb-publicsuffix-646accdcd86313c6", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:publicsuffix:publicsuffix:20231001.0357-0.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/publicsuffix@20231001.0357-0.1?arch=all\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-CC0 AND MPL-2.0", + "name": "publicsuffix", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/publicsuffix/copyright, /var/lib/dpkg/info/publicsuffix.md5sums, /var/lib/dpkg/info/publicsuffix.list", + "supplier": "NOASSERTION", + "versionInfo": "20231001.0357-0.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-readline-common-ede97742baad2719", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:readline-common:readline-common:8.2-4build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:readline-common:readline_common:8.2-4build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:readline_common:readline-common:8.2-4build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:readline_common:readline_common:8.2-4build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:readline:readline-common:8.2-4build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:readline:readline_common:8.2-4build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/readline-common@8.2-4build1?arch=all\u0026distro=ubuntu-24.04\u0026upstream=readline", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-GFDL AND LicenseRef-GFDL-NIV-1.3- AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-ISC-no-attribution", + "name": "readline-common", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/readline-common/copyright, /var/lib/dpkg/info/readline-common.md5sums, /var/lib/dpkg/info/readline-common.list, /var/lib/dpkg/info/readline-common.postinst, /var/lib/dpkg/info/readline-common.postrm", + "supplier": "NOASSERTION", + "versionInfo": "8.2-4build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-sed-1c58aaf5ad1b37f3", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sed:sed:4.9-2build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/sed@4.9-2build1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-4-Clause-UC AND BSL-1.0 AND GFDL-1.3-only AND LicenseRef-GFDL-NIV-1.3- AND GPL-3.0-only AND GPL-3.0-or-later AND ISC AND X11 AND LicenseRef-pcre", + "name": "sed", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/sed/copyright, /var/lib/dpkg/info/sed.md5sums, /var/lib/dpkg/info/sed.list", + "supplier": "NOASSERTION", + "versionInfo": "4.9-2build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-sensible-utils-16b4aaa898af9f49", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sensible-utils:sensible-utils:0.0.22:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sensible-utils:sensible_utils:0.0.22:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sensible_utils:sensible-utils:0.0.22:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sensible_utils:sensible_utils:0.0.22:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sensible:sensible-utils:0.0.22:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sensible:sensible_utils:0.0.22:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/sensible-utils@0.0.22?arch=all\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-All-permissive AND BSD-2-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-configure AND LicenseRef-installsh", + "name": "sensible-utils", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/sensible-utils/copyright, /var/lib/dpkg/info/sensible-utils.md5sums, /var/lib/dpkg/info/sensible-utils.list", + "supplier": "NOASSERTION", + "versionInfo": "0.0.22" + }, + { + "SPDXID": "SPDXRef-Package-deb-systemd-dev-69341222e5b700d0", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd-dev:systemd-dev:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd-dev:systemd_dev:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd_dev:systemd-dev:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd_dev:systemd_dev:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd:systemd-dev:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd:systemd_dev:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/systemd-dev@255.4-1ubuntu8.10?arch=all\u0026distro=ubuntu-24.04\u0026upstream=systemd", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-public-domain", + "name": "systemd-dev", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/systemd-dev/copyright, /var/lib/dpkg/info/systemd-dev.md5sums, /var/lib/dpkg/info/systemd-dev.list", + "supplier": "NOASSERTION", + "versionInfo": "255.4-1ubuntu8.10" + }, + { + "SPDXID": "SPDXRef-Package-deb-systemd-hwe-hwdb-7af3ec8c47b488e3", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd-hwe-hwdb:systemd-hwe-hwdb:255.1.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd-hwe-hwdb:systemd_hwe_hwdb:255.1.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd_hwe_hwdb:systemd-hwe-hwdb:255.1.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd_hwe_hwdb:systemd_hwe_hwdb:255.1.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd-hwe:systemd-hwe-hwdb:255.1.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd-hwe:systemd_hwe_hwdb:255.1.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd_hwe:systemd-hwe-hwdb:255.1.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd_hwe:systemd_hwe_hwdb:255.1.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd:systemd-hwe-hwdb:255.1.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd:systemd_hwe_hwdb:255.1.5:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/systemd-hwe-hwdb@255.1.5?arch=all\u0026distro=ubuntu-24.04\u0026upstream=systemd-hwe", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later", + "name": "systemd-hwe-hwdb", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/systemd-hwe-hwdb/copyright, /var/lib/dpkg/info/systemd-hwe-hwdb.md5sums, /var/lib/dpkg/info/systemd-hwe-hwdb.list, /var/lib/dpkg/info/systemd-hwe-hwdb.postinst, /var/lib/dpkg/info/systemd-hwe-hwdb.postrm", + "supplier": "NOASSERTION", + "versionInfo": "255.1.5" + }, + { + "SPDXID": "SPDXRef-Package-deb-systemd-standalone-sysusers-a8f08f87d11c2dcc", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd-standalone-sysusers:systemd-standalone-sysusers:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd-standalone-sysusers:systemd_standalone_sysusers:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd_standalone_sysusers:systemd-standalone-sysusers:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd_standalone_sysusers:systemd_standalone_sysusers:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd-standalone:systemd-standalone-sysusers:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd-standalone:systemd_standalone_sysusers:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd_standalone:systemd-standalone-sysusers:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd_standalone:systemd_standalone_sysusers:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd:systemd-standalone-sysusers:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:systemd:systemd_standalone_sysusers:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/systemd-standalone-sysusers@255.4-1ubuntu8.10?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=systemd", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-public-domain", + "name": "systemd-standalone-sysusers", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/systemd-standalone-sysusers/copyright, /var/lib/dpkg/info/systemd-standalone-sysusers.md5sums, /var/lib/dpkg/info/systemd-standalone-sysusers.list", + "supplier": "NOASSERTION", + "versionInfo": "255.4-1ubuntu8.10" + }, + { + "SPDXID": "SPDXRef-Package-deb-sysvinit-utils-c997e4113ef7ac60", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sysvinit-utils:sysvinit-utils:3.08-6ubuntu3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sysvinit-utils:sysvinit_utils:3.08-6ubuntu3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sysvinit_utils:sysvinit-utils:3.08-6ubuntu3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sysvinit_utils:sysvinit_utils:3.08-6ubuntu3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sysvinit:sysvinit-utils:3.08-6ubuntu3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:sysvinit:sysvinit_utils:3.08-6ubuntu3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/sysvinit-utils@3.08-6ubuntu3?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=sysvinit", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-only AND LGPL-2.1-only AND LGPL-2.1-or-later", + "name": "sysvinit-utils", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/sysvinit-utils/copyright, /var/lib/dpkg/info/sysvinit-utils.md5sums, /var/lib/dpkg/info/sysvinit-utils.list", + "supplier": "NOASSERTION", + "versionInfo": "3.08-6ubuntu3" + }, + { + "SPDXID": "SPDXRef-Package-deb-tar-059ac6c07034f18c", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:tar:tar:1.35\\+dfsg-3build1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/tar@1.35%2Bdfsg-3build1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later", + "name": "tar", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/tar/copyright, /var/lib/dpkg/info/tar.md5sums, /var/lib/dpkg/info/tar.list, /var/lib/dpkg/info/tar.postinst, /var/lib/dpkg/info/tar.prerm", + "supplier": "NOASSERTION", + "versionInfo": "1.35+dfsg-3build1" + }, + { + "SPDXID": "SPDXRef-Package-deb-tzdata-9f9ef5544f256090", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:tzdata:tzdata:2025b-0ubuntu0.24.04.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/tzdata@2025b-0ubuntu0.24.04.1?arch=all\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "ICU AND LicenseRef-public-domain", + "name": "tzdata", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/tzdata/copyright, /var/lib/dpkg/info/tzdata.md5sums, /var/lib/dpkg/info/tzdata.config, /var/lib/dpkg/info/tzdata.list, /var/lib/dpkg/info/tzdata.postinst, /var/lib/dpkg/info/tzdata.postrm, /var/lib/dpkg/info/tzdata.templates", + "supplier": "NOASSERTION", + "versionInfo": "2025b-0ubuntu0.24.04.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-ubuntu-keyring-c1dfa211d9e08b7c", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ubuntu-keyring:ubuntu-keyring:2023.11.28.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ubuntu-keyring:ubuntu_keyring:2023.11.28.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ubuntu_keyring:ubuntu-keyring:2023.11.28.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ubuntu_keyring:ubuntu_keyring:2023.11.28.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ubuntu:ubuntu-keyring:2023.11.28.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:ubuntu:ubuntu_keyring:2023.11.28.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/ubuntu-keyring@2023.11.28.1?arch=all\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "LicenseRef-GPL", + "name": "ubuntu-keyring", + "originator": "Person: Dimitri John Ledkov (dimitri.ledkov@canonical.com)", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/ubuntu-keyring/copyright, /var/lib/dpkg/info/ubuntu-keyring.md5sums, /var/lib/dpkg/info/ubuntu-keyring.list, /var/lib/dpkg/info/ubuntu-keyring.postinst", + "supplier": "Person: Dimitri John Ledkov (dimitri.ledkov@canonical.com)", + "versionInfo": "2023.11.28.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-udev-2091936089b1452a", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:udev:udev:255.4-1ubuntu8.10:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/udev@255.4-1ubuntu8.10?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=systemd", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "CC0-1.0 AND LicenseRef-Expat AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-public-domain", + "name": "udev", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/udev/copyright, /var/lib/dpkg/info/udev.conffiles, /var/lib/dpkg/info/udev.md5sums, /var/lib/dpkg/info/udev.list, /var/lib/dpkg/info/udev.postinst, /var/lib/dpkg/info/udev.postrm, /var/lib/dpkg/info/udev.preinst, /var/lib/dpkg/info/udev.prerm, /var/lib/dpkg/info/udev.triggers", + "supplier": "NOASSERTION", + "versionInfo": "255.4-1ubuntu8.10" + }, + { + "SPDXID": "SPDXRef-Package-deb-unminimize-ac23ecb5ae09e407", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:unminimize:unminimize:0.2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/unminimize@0.2.1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later", + "name": "unminimize", + "originator": "Person: Utkarsh Gupta (utkarsh@ubuntu.com)", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/unminimize/copyright, /var/lib/dpkg/info/unminimize.md5sums, /var/lib/dpkg/info/unminimize.list, /var/lib/dpkg/info/unminimize.postinst", + "supplier": "Person: Utkarsh Gupta (utkarsh@ubuntu.com)", + "versionInfo": "0.2.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-util-linux-128cb56c9a454ff7", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:util-linux:util-linux:2.39.3-9ubuntu6.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:util-linux:util_linux:2.39.3-9ubuntu6.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:util_linux:util-linux:2.39.3-9ubuntu6.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:util_linux:util_linux:2.39.3-9ubuntu6.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:util:util-linux:2.39.3-9ubuntu6.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:util:util_linux:2.39.3-9ubuntu6.3:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/util-linux@2.39.3-9ubuntu6.3?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "BSD-3-Clause AND BSD-4-Clause AND LicenseRef-BSLA AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-LGPL AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT AND LicenseRef-public-domain", + "name": "util-linux", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/util-linux/copyright, /var/lib/dpkg/info/util-linux.conffiles, /var/lib/dpkg/info/util-linux.md5sums, /var/lib/dpkg/info/util-linux.list, /var/lib/dpkg/info/util-linux.postinst, /var/lib/dpkg/info/util-linux.postrm, /var/lib/dpkg/info/util-linux.prerm", + "supplier": "NOASSERTION", + "versionInfo": "2.39.3-9ubuntu6.3" + }, + { + "SPDXID": "SPDXRef-Package-deb-wget-60066e1a0c3c8412", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:wget:wget:1.21.4-1ubuntu4.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/wget@1.21.4-1ubuntu4.1?arch=amd64\u0026distro=ubuntu-24.04", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "GFDL-1.2-only AND GPL-3.0-only", + "name": "wget", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/wget/copyright, /var/lib/dpkg/info/wget.conffiles, /var/lib/dpkg/info/wget.md5sums, /var/lib/dpkg/info/wget.list", + "supplier": "NOASSERTION", + "versionInfo": "1.21.4-1ubuntu4.1" + }, + { + "SPDXID": "SPDXRef-Package-deb-zlib1g-ac4c65178408e21f", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceLocator": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.3.dfsg-3.1ubuntu2.1:*:*:*:*:*:*:*", + "referenceType": "cpe23Type" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceLocator": "pkg:deb/ubuntu/zlib1g@1%3A1.3.dfsg-3.1ubuntu2.1?arch=amd64\u0026distro=ubuntu-24.04\u0026upstream=zlib", + "referenceType": "purl" + } + ], + "filesAnalyzed": true, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "Zlib", + "name": "zlib1g", + "packageVerificationCode": { + "packageVerificationCodeValue": "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, + "sourceInfo": "acquired package info from DPKG DB: /var/lib/dpkg/status, /usr/share/doc/zlib1g/copyright, /var/lib/dpkg/info/zlib1g:amd64.md5sums", + "supplier": "NOASSERTION", + "versionInfo": "1:1.3.dfsg-3.1ubuntu2.1" + }, + { + "SPDXID": "SPDXRef-DocumentRoot-Directory-sbom", + "copyrightText": "NOASSERTION", + "downloadLocation": "NOASSERTION", + "filesAnalyzed": false, + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "NOASSERTION", + "name": "sbom", + "primaryPackagePurpose": "FILE", + "supplier": "NOASSERTION" + } +] \ No newline at end of file diff --git a/tests/sbom_buildx_formatted_blob.txt b/tests/sbom_buildx_formatted_blob.txt new file mode 100644 index 0000000..04823e1 --- /dev/null +++ b/tests/sbom_buildx_formatted_blob.txt @@ -0,0 +1,149 @@ +NAME VERSION +adduser 3.137ubuntu1 +apt 2.8.3 +apt-utils 2.8.3 +base-files 13ubuntu10.3 +base-passwd 3.6.3build1 +bash 5.2.21-2ubuntu4 +bsdutils 1:2.39.3-9ubuntu6.3 +ca-certificates 20240203 +catatonit 0.1.7-1 +coreutils 9.4-3ubuntu6.1 +cron 3.0pl1-184ubuntu2 +cron-daemon-common 3.0pl1-184ubuntu2 +curl 8.5.0-2ubuntu10.6 +dash 0.5.12-6ubuntu5 +debconf 1.5.86ubuntu1 +debianutils 5.17build1 +diffutils 1:3.10-1build1 +dirmngr 2.4.4-2ubuntu17.3 +dpkg 1.22.6ubuntu6.2 +e2fsprogs 1.47.0-2.4~exp1ubuntu4.1 +findutils 4.9.0-5build1 +gcc-14-base 14.2.0-4ubuntu2~24.04 +gnupg 2.4.4-2ubuntu17.3 +gnupg-l10n 2.4.4-2ubuntu17.3 +gnupg-utils 2.4.4-2ubuntu17.3 +gpg 2.4.4-2ubuntu17.3 +gpg-agent 2.4.4-2ubuntu17.3 +gpg-wks-client 2.4.4-2ubuntu17.3 +gpgconf 2.4.4-2ubuntu17.3 +gpgsm 2.4.4-2ubuntu17.3 +gpgv 2.4.4-2ubuntu17.3 +grep 3.11-4build1 +gzip 1.12-1ubuntu3.1 +hostname 3.23+nmu2ubuntu2 +init-system-helpers 1.66ubuntu1 +jq 1.7.1-3ubuntu0.24.04.1 +keyboxd 2.4.4-2ubuntu17.3 +krb5-locales 1.20.1-6ubuntu2.6 +libacl1 2.3.2-1build1.1 +libapt-pkg6.0t64 2.8.3 +libassuan0 2.5.6-1build1 +libattr1 1:2.5.2-1build1.1 +libaudit-common 1:3.1.2-2.1build1.1 +libaudit1 1:3.1.2-2.1build1.1 +libblkid1 2.39.3-9ubuntu6.3 +libbrotli1 1.1.0-2build2 +libbsd0 0.12.1-1build1.1 +libbz2-1.0 1.0.8-5.1build0.1 +libc-bin 2.39-0ubuntu8.6 +libc6 2.39-0ubuntu8.6 +libcap-ng0 0.8.4-2build2 +libcap2 1:2.66-5ubuntu2.2 +libcom-err2 1.47.0-2.4~exp1ubuntu4.1 +libcrypt1 1:4.4.36-4build1 +libcurl4t64 8.5.0-2ubuntu10.6 +libdb5.3t64 5.3.28+dfsg2-7 +libdebconfclient0 0.271ubuntu3 +libext2fs2t64 1.47.0-2.4~exp1ubuntu4.1 +libffi8 3.4.6-1build1 +libgcc-s1 14.2.0-4ubuntu2~24.04 +libgcrypt20 1.10.3-2build1 +libgmp10 2:6.3.0+dfsg-2ubuntu6.1 +libgnutls30t64 3.8.3-1.1ubuntu3.4 +libgpg-error0 1.47-3build2.1 +libgssapi-krb5-2 1.20.1-6ubuntu2.6 +libhogweed6t64 3.9.1-2.2build1.1 +libidn2-0 2.3.7-2build1.1 +libjq1 1.7.1-3ubuntu0.24.04.1 +libk5crypto3 1.20.1-6ubuntu2.6 +libkeyutils1 1.6.3-3build1 +libkmod2 31+20240202-2ubuntu7.1 +libkrb5-3 1.20.1-6ubuntu2.6 +libkrb5support0 1.20.1-6ubuntu2.6 +libksba8 1.6.6-1build1 +libldap-common 2.6.7+dfsg-1~exp1ubuntu8. +libldap2 2.6.7+dfsg-1~exp1ubuntu8. +liblz4-1 1.9.4-1build1.1 +liblzma5 5.6.1+really5.4.5-1ubuntu +libmd0 1.1.0-2build1.1 +libmount1 2.39.3-9ubuntu6.3 +libncursesw6 6.4+20240113-1ubuntu2 +libnettle8t64 3.9.1-2.2build1.1 +libnghttp2-14 1.59.0-1ubuntu0.2 +libnpth0t64 1.6-3.1build1 +libonig5 6.9.9-1build1 +libp11-kit0 0.25.3-4ubuntu2.1 +libpam-modules 1.5.3-5ubuntu5.5 +libpam-modules-bin 1.5.3-5ubuntu5.5 +libpam-runtime 1.5.3-5ubuntu5.5 +libpam0g 1.5.3-5ubuntu5.5 +libpcre2-8-0 10.42-4ubuntu2.1 +libproc2-0 2:4.0.4-4ubuntu3.2 +libpsl5t64 0.21.2-1.1build1 +libreadline8t64 8.2-4build1 +librtmp1 2.4+20151223.gitfa8646d.1 +libsasl2-2 2.1.28+dfsg1-5ubuntu3.1 +libsasl2-modules 2.1.28+dfsg1-5ubuntu3.1 +libsasl2-modules-db 2.1.28+dfsg1-5ubuntu3.1 +libseccomp2 2.5.5-1ubuntu3.1 +libselinux1 3.5-2ubuntu2.1 +libsemanage-common 3.5-1build5 +libsemanage2 3.5-1build5 +libsepol2 3.5-2build1 +libsmartcols1 2.39.3-9ubuntu6.3 +libsqlite3-0 3.45.1-1ubuntu2.5 +libss2 1.47.0-2.4~exp1ubuntu4.1 +libssh-4 0.10.6-2ubuntu0.1 +libssl3t64 3.0.13-0ubuntu3.5 +libstdc++6 14.2.0-4ubuntu2~24.04 +libsystemd0 255.4-1ubuntu8.10 +libtasn1-6 4.19.0-3ubuntu0.24.04.1 +libtinfo6 6.4+20240113-1ubuntu2 +libudev1 255.4-1ubuntu8.10 +libunistring5 1.1-2build1.1 +libuuid1 2.39.3-9ubuntu6.3 +libxxhash0 0.8.2-2build1 +libzstd1 1.5.5+dfsg2-2build1.1 +locales 2.39-0ubuntu8.6 +login 1:4.13+dfsg1-4ubuntu3.2 +logsave 1.47.0-2.4~exp1ubuntu4.1 +mawk 1.3.4.20240123-1build1 +mount 2.39.3-9ubuntu6.3 +ncurses-base 6.4+20240113-1ubuntu2 +ncurses-bin 6.4+20240113-1ubuntu2 +netcat-openbsd 1.226-1ubuntu2 +openssl 3.0.13-0ubuntu3.5 +passwd 1:4.13+dfsg1-4ubuntu3.2 +perl-base 5.38.2-3.2ubuntu0.2 +pinentry-curses 1.2.1-3ubuntu5 +plexmediaserver 1.42.2.10156-f737b826c +procps 2:4.0.4-4ubuntu3.2 +publicsuffix 20231001.0357-0.1 +readline-common 8.2-4build1 +sed 4.9-2build1 +sensible-utils 0.0.22 +systemd-dev 255.4-1ubuntu8.10 +systemd-hwe-hwdb 255.1.5 +systemd-standalone-sysusers 255.4-1ubuntu8.10 +sysvinit-utils 3.08-6ubuntu3 +tar 1.35+dfsg-3build1 +tzdata 2025b-0ubuntu0.24.04.1 +ubuntu-keyring 2023.11.28.1 +udev 255.4-1ubuntu8.10 +unminimize 0.2.1 +util-linux 2.39.3-9ubuntu6.3 +wget 1.21.4-1ubuntu4.1 +zlib1g 1:1.3.dfsg-3.1ubuntu2.1 +sbom diff --git a/tests/test_ci.py b/tests/test_ci.py index 051e3a8..834dd52 100644 --- a/tests/test_ci.py +++ b/tests/test_ci.py @@ -1,5 +1,5 @@ import os -from unittest.mock import Mock +from unittest.mock import Mock, patch import json import pytest @@ -8,7 +8,7 @@ from docker import DockerClient from moto import mock_aws -from ci.ci import CI, SetEnvs +from ci.ci import CI, SetEnvs, CITestResult, CITests, Platform os.environ["DRY_RUN"] = "false" os.environ["IMAGE"] = "linuxserver/test" @@ -29,6 +29,18 @@ def sbom_blob() -> bytes: with open("tests/sbom_blob.txt", "rb") as f: yield f.read() +@pytest.fixture +def sbom_buildx_blob() -> str: + with open("tests/sbom_buildx_blob.txt", "rb") as f: + data = f.read() + yield data.decode("utf-8").strip() + +@pytest.fixture +def sbom_buildx_formatted_blob() -> str: + with open("tests/sbom_buildx_formatted_blob.txt", "rb") as f: + data = f.read() + yield data.decode("utf-8").strip() + @pytest.fixture def syft_mock_container(sbom_blob:bytes) -> Mock: container = Mock(spec=Container) @@ -38,11 +50,12 @@ def syft_mock_container(sbom_blob:bytes) -> Mock: yield container @pytest.fixture -def ci(tmpdir, syft_mock_container: Mock) -> CI: +def ci(tmpdir, syft_mock_container: Mock, sbom_buildx_blob: str) -> CI: ci = CI() ci.client = Mock(DockerClient) ci.client.containers = Mock() ci.client.containers.run = Mock(return_value=syft_mock_container) + ci.get_sbom_buildx_blob = Mock(return_value=sbom_buildx_blob) ci.outdir = tmpdir yield ci @@ -108,8 +121,8 @@ def test_convert_env(set_envs: SetEnvs): def test_add_test_result(ci: CI): for tag in ci.tags: - ci._add_test_result(tag=tag, test=f"test-{tag}", status="PASS", message="-", start_time="") - assert ci.tag_report_tests[tag] == {'test': {f"test-{tag}": {"status": "PASS", "message": "-", "runtime": "-"}}} + ci._add_test_result(tag=tag, test=CITests.CONTAINER_START, status=CITestResult.PASS, message="-", start_time="") + assert ci.tag_report_tests[tag] == {'test': {CITests.CONTAINER_START.value: {"status": "PASS", "message": "-", "runtime": "-"}}} def test_get_build_info(ci: CI, mock_container: Mock): info: dict[str, str] = ci.get_build_info(mock_container,ci.tags[0]) @@ -125,20 +138,20 @@ def test_get_build_info(ci: CI, mock_container: Mock): assert info == mock_info def test_get_platform(ci: CI): - assert ci.get_platform(ci.tags[0]) == "amd64" - assert ci.get_platform(ci.tags[1]) == "arm64" + assert ci.get_platform(ci.tags[0]) == Platform.AMD64.value + assert ci.get_platform(ci.tags[1]) == Platform.ARM64.value def test_watch_container_logs(ci: CI, mock_container: Mock): ci.watch_container_logs(mock_container, ci.tags[0]) - assert ci.tag_report_tests[ci.tags[0]]["test"]["Container startup"]["status"] == "PASS" + assert ci.tag_report_tests[ci.tags[0]]["test"][CITests.CONTAINER_START.value]["status"] == CITestResult.PASS.value def test_take_screenshot(ci:CI,mock_container: Mock): screenshot: bool = ci.take_screenshot(mock_container, ci.tags[0]) if screenshot: assert os.path.isfile(os.path.join(ci.outdir, f"{ci.tags[0]}.png")) is True - assert ci.tag_report_tests[ci.tags[0]]["test"]["Get screenshot"]["status"] == "PASS" + assert ci.tag_report_tests[ci.tags[0]]["test"][CITests.CAPTURE_SCREENSHOT.value]["status"] == CITestResult.PASS.value else: - assert ci.tag_report_tests[ci.tags[0]]["test"]["Get screenshot"]["status"] == "FAIL" + assert ci.tag_report_tests[ci.tags[0]]["test"][CITests.CAPTURE_SCREENSHOT.value]["status"] == CITestResult.FAIL.value def test_create_html_ansi_file(ci:CI, log_blob:bytes): logs = log_blob.decode("utf-8") @@ -159,10 +172,41 @@ def test_badge_render(ci:CI): ci.badge_render() assert os.path.isfile(os.path.join(ci.outdir,"ci-status.yml")) is True -def test_generate_sbom(ci:CI, syft_mock_container:Mock, sbom_blob:bytes): - sbom = ci.generate_sbom(ci.tags[0]) +def test_get_sbom_syft(ci:CI, syft_mock_container:Mock, sbom_blob:bytes): + sbom = ci.get_sbom_syft(ci.tags[0]) assert "VERSION" in sbom +def test_parse_buildx_sbom(ci:CI, sbom_buildx_blob:str): + packages = ci.parse_buildx_sbom(sbom_buildx_blob) + assert len(packages) == 148 + assert packages[0]["name"] == "adduser" + assert packages[0]["version"] == "3.137ubuntu1" + +def test_format_package_table(ci:CI, sbom_buildx_blob:str, sbom_buildx_formatted_blob: str): + packages = ci.parse_buildx_sbom(sbom_buildx_blob) + table = ci.format_package_table(packages) + assert "VERSION" in table + assert "cron" in table + assert "3.0pl1-184ubuntu2" in table + +def test_get_sbom_buildx_blob(ci: CI, sbom_buildx_blob: str) -> None: + expected_output = sbom_buildx_blob + mock_completed_process = Mock() + mock_completed_process.returncode = 0 + mock_completed_process.stdout = expected_output + + with patch("subprocess.run", return_value=mock_completed_process): + sbom = ci.get_sbom_buildx_blob(ci.tags[0]) + assert sbom.strip() == expected_output.strip() + +def test_make_sbom(ci: CI, sbom_buildx_blob: str, sbom_buildx_formatted_blob: str) -> None: + with patch.object(ci, 'get_sbom_buildx_blob', return_value=sbom_buildx_blob): + packages = ci.make_sbom(ci.tags[0]) + assert os.path.isfile(os.path.join(ci.outdir,"amd64-nightly-5.10.1.9109-ls85.sbom.html")) is True + assert "VERSION" in packages + assert "cron" in packages + assert "3.0pl1-184ubuntu2" in packages + def test_create_s3_client(ci:CI): with mock_aws(): ci.s3_client = ci.create_s3_client() From b94d2b209602aed3c6d568643ad0ac723c6d57b9 Mon Sep 17 00:00:00 2001 From: Marius <24592972+gilbN@users.noreply.github.com> Date: Sat, 4 Oct 2025 21:13:38 +0200 Subject: [PATCH 03/12] Remove unnecessary comparison. Remove newline character --- ci/ci.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ci/ci.py b/ci/ci.py index 89c8e4e..54a68c9 100755 --- a/ci/ci.py +++ b/ci/ci.py @@ -568,7 +568,7 @@ def make_sbom(self, tag: str) -> "str|CITestResult": """ start_time = time.time() sbom: str | CITestResult = self.get_sbom_buildx_blob(tag) - if isinstance(sbom, str) and sbom != CITestResult.ERROR: + if isinstance(sbom, str): packages: list[dict[str, str]] = self.parse_buildx_sbom(sbom) formatted_table: str | CITestResult = self.format_package_table(packages=packages) if packages and formatted_table != CITestResult.ERROR: @@ -877,7 +877,7 @@ def badge_render(self) -> None: "PASS": "green", "FAIL": "red"}) badge.write_badge(f"{self.outdir}/badge.svg", overwrite=True) with open(f"{self.outdir}/ci-status.yml", "w", encoding="utf-8") as file: - file.write(f"CI: '{self.report_status.value}'\n") + file.write(f"CI: '{self.report_status.value}'") except (ValueError,RuntimeError,FileNotFoundError,OSError): self.logger.exception("Failed to render badge file!") From 52781a68bd3ff5d7fabd6ff5b63d7a05fff9cb31 Mon Sep 17 00:00:00 2001 From: thespad Date: Sat, 4 Oct 2025 21:14:42 +0100 Subject: [PATCH 04/12] Create develop branch --- .github/CONTRIBUTING.md | 4 +- .github/PULL_REQUEST_TEMPLATE.md | 2 +- .github/workflows/external_trigger.yml | 6 +- .github/workflows/greetings.yml | 2 +- Jenkinsfile | 102 ++++++++++++------------- README.md | 2 +- jenkins-vars.yml | 6 +- 7 files changed, 62 insertions(+), 62 deletions(-) diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md index 4bf8515..0d3cdf0 100644 --- a/.github/CONTRIBUTING.md +++ b/.github/CONTRIBUTING.md @@ -24,7 +24,7 @@ ## Readme If you would like to change our readme, please __**do not**__ directly edit the readme, as it is auto-generated on each commit. -Instead edit the [readme-vars.yml](https://github.com/linuxserver/docker-ci/edit/master/readme-vars.yml). +Instead edit the [readme-vars.yml](https://github.com/linuxserver/docker-ci/edit/develop/readme-vars.yml). These variables are used in a template for our [Jenkins Builder](https://github.com/linuxserver/docker-jenkins-builder) as part of an ansible play. Most of these variables are also carried over to [docs.linuxserver.io](https://docs.linuxserver.io) @@ -115,7 +115,7 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64 ## Update the changelog -If you are modifying the Dockerfiles or any of the startup scripts in [root](https://github.com/linuxserver/docker-ci/tree/master/root), add an entry to the changelog +If you are modifying the Dockerfiles or any of the startup scripts in [root](https://github.com/linuxserver/docker-ci/tree/develop/root), add an entry to the changelog ```yml changelogs: diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md index 4f13a9a..91d184b 100644 --- a/.github/PULL_REQUEST_TEMPLATE.md +++ b/.github/PULL_REQUEST_TEMPLATE.md @@ -21,7 +21,7 @@ ------------------------------ - - [ ] I have read the [contributing](https://github.com/linuxserver/docker-ci/blob/master/.github/CONTRIBUTING.md) guideline and understand that I have made the correct modifications + - [ ] I have read the [contributing](https://github.com/linuxserver/docker-ci/blob/develop/.github/CONTRIBUTING.md) guideline and understand that I have made the correct modifications ------------------------------ diff --git a/.github/workflows/external_trigger.yml b/.github/workflows/external_trigger.yml index 7954afe..ce6e76c 100644 --- a/.github/workflows/external_trigger.yml +++ b/.github/workflows/external_trigger.yml @@ -7,13 +7,13 @@ permissions: contents: read jobs: - external-trigger-master: + external-trigger-develop: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4.1.1 - name: External Trigger - if: github.ref == 'refs/heads/master' + if: github.ref == 'refs/heads/develop' env: SKIP_EXTERNAL_TRIGGER: ${{ vars.SKIP_EXTERNAL_TRIGGER }} run: | @@ -21,7 +21,7 @@ jobs: echo "Type is \`os\`" >> $GITHUB_STEP_SUMMARY echo "No external release, exiting" >> $GITHUB_STEP_SUMMARY exit 0 - if grep -q "^ci_master_${EXT_RELEASE}" <<< "${SKIP_EXTERNAL_TRIGGER}"; then + if grep -q "^ci_develop_${EXT_RELEASE}" <<< "${SKIP_EXTERNAL_TRIGGER}"; then echo "> [!WARNING]" >> $GITHUB_STEP_SUMMARY echo "> Github organizational variable \`SKIP_EXTERNAL_TRIGGER\` matches current external release; skipping trigger." >> $GITHUB_STEP_SUMMARY exit 0 diff --git a/.github/workflows/greetings.yml b/.github/workflows/greetings.yml index 72ab395..8249aff 100644 --- a/.github/workflows/greetings.yml +++ b/.github/workflows/greetings.yml @@ -15,5 +15,5 @@ jobs: - uses: actions/first-interaction@v1 with: issue-message: 'Thanks for opening your first issue here! Be sure to follow the relevant issue templates, or risk having this issue marked as invalid.' - pr-message: 'Thanks for opening this pull request! Be sure to follow the [pull request template](https://github.com/linuxserver/docker-ci/blob/master/.github/PULL_REQUEST_TEMPLATE.md)!' + pr-message: 'Thanks for opening this pull request! Be sure to follow the [pull request template](https://github.com/linuxserver/docker-ci/blob/develop/.github/PULL_REQUEST_TEMPLATE.md)!' repo-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/Jenkinsfile b/Jenkinsfile index e434ad3..5744d74 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -76,7 +76,7 @@ pipeline { script{ env.EXIT_STATUS = '' env.LS_RELEASE = sh( - script: '''docker run --rm quay.io/skopeo/stable:v1 inspect docker://ghcr.io/${LS_USER}/${CONTAINER_NAME}:latest 2>/dev/null | jq -r '.Labels.build_version' | awk '{print $3}' | grep '\\-ls' || : ''', + script: '''docker run --rm quay.io/skopeo/stable:v1 inspect docker://ghcr.io/${LS_USER}/${CONTAINER_NAME}:develop 2>/dev/null | jq -r '.Labels.build_version' | awk '{print $3}' | grep '\\-ls' || : ''', returnStdout: true).trim() env.LS_RELEASE_NOTES = sh( script: '''cat readme-vars.yml | awk -F \\" '/date: "[0-9][0-9].[0-9][0-9].[0-9][0-9]:/ {print $4;exit;}' | sed -E ':a;N;$!ba;s/\\r{0,1}\\n/\\\\n/g' ''', @@ -109,7 +109,7 @@ pipeline { script{ env.LS_TAG_NUMBER = sh( script: '''#! /bin/bash - tagsha=$(git rev-list -n 1 ${LS_RELEASE} 2>/dev/null) + tagsha=$(git rev-list -n 1 develop-${LS_RELEASE} 2>/dev/null) if [ "${tagsha}" == "${COMMIT_SHA}" ]; then echo ${LS_RELEASE_NUMBER} elif [ -z "${GIT_COMMIT}" ]; then @@ -185,10 +185,10 @@ pipeline { } } } - // If this is a master build use live docker endpoints + // If this is a develop build use live docker endpoints stage("Set ENV live build"){ when { - branch "master" + branch "develop" environment name: 'CHANGE_ID', value: '' } steps { @@ -198,13 +198,13 @@ pipeline { env.GITLABIMAGE = 'registry.gitlab.com/linuxserver.io/' + env.LS_REPO + '/' + env.CONTAINER_NAME env.QUAYIMAGE = 'quay.io/linuxserver.io/' + env.CONTAINER_NAME if (env.MULTIARCH == 'true') { - env.CI_TAGS = 'amd64-' + env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER + '|arm64v8-' + env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER + env.CI_TAGS = 'amd64-develop-' + env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER + '|arm64v8-develop-' + env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER } else { - env.CI_TAGS = env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER + env.CI_TAGS = 'develop-' + env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER } env.VERSION_TAG = env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER - env.META_TAG = env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER - env.EXT_RELEASE_TAG = 'version-' + env.EXT_RELEASE_CLEAN + env.META_TAG = 'develop-' + env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER + env.EXT_RELEASE_TAG = 'develop-version-' + env.EXT_RELEASE_CLEAN env.BUILDCACHE = 'docker.io/lsiodev/buildcache,registry.gitlab.com/linuxserver.io/docker-jenkins-builder/lsiodev-buildcache,ghcr.io/linuxserver/lsiodev-buildcache,quay.io/linuxserver.io/lsiodev-buildcache' } } @@ -212,7 +212,7 @@ pipeline { // If this is a dev build use dev docker endpoints stage("Set ENV dev build"){ when { - not {branch "master"} + not {branch "develop"} environment name: 'CHANGE_ID', value: '' } steps { @@ -222,13 +222,13 @@ pipeline { env.GITLABIMAGE = 'registry.gitlab.com/linuxserver.io/' + env.LS_REPO + '/lsiodev-' + env.CONTAINER_NAME env.QUAYIMAGE = 'quay.io/linuxserver.io/lsiodev-' + env.CONTAINER_NAME if (env.MULTIARCH == 'true') { - env.CI_TAGS = 'amd64-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '|arm64v8-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + env.CI_TAGS = 'amd64-develop-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '|arm64v8-develop-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA } else { - env.CI_TAGS = env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + env.CI_TAGS = 'develop-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA } env.VERSION_TAG = env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA - env.META_TAG = env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA - env.EXT_RELEASE_TAG = 'version-' + env.EXT_RELEASE_CLEAN + env.META_TAG = 'develop-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + env.EXT_RELEASE_TAG = 'develop-version-' + env.EXT_RELEASE_CLEAN env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.DEV_DOCKERHUB_IMAGE + '/tags/' env.BUILDCACHE = 'docker.io/lsiodev/buildcache,registry.gitlab.com/linuxserver.io/docker-jenkins-builder/lsiodev-buildcache,ghcr.io/linuxserver/lsiodev-buildcache,quay.io/linuxserver.io/lsiodev-buildcache' } @@ -246,13 +246,13 @@ pipeline { env.GITLABIMAGE = 'registry.gitlab.com/linuxserver.io/' + env.LS_REPO + '/lspipepr-' + env.CONTAINER_NAME env.QUAYIMAGE = 'quay.io/linuxserver.io/lspipepr-' + env.CONTAINER_NAME if (env.MULTIARCH == 'true') { - env.CI_TAGS = 'amd64-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '-pr-' + env.PULL_REQUEST + '|arm64v8-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '-pr-' + env.PULL_REQUEST + env.CI_TAGS = 'amd64-develop-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '-pr-' + env.PULL_REQUEST + '|arm64v8-develop-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '-pr-' + env.PULL_REQUEST } else { - env.CI_TAGS = env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '-pr-' + env.PULL_REQUEST + env.CI_TAGS = 'develop-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '-pr-' + env.PULL_REQUEST } env.VERSION_TAG = env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '-pr-' + env.PULL_REQUEST - env.META_TAG = env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '-pr-' + env.PULL_REQUEST - env.EXT_RELEASE_TAG = 'version-' + env.EXT_RELEASE_CLEAN + env.META_TAG = 'develop-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '-pr-' + env.PULL_REQUEST + env.EXT_RELEASE_TAG = 'develop-version-' + env.EXT_RELEASE_CLEAN env.CODE_URL = 'https://github.com/' + env.LS_USER + '/' + env.LS_REPO + '/pull/' + env.PULL_REQUEST env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.PR_DOCKERHUB_IMAGE + '/tags/' env.BUILDCACHE = 'docker.io/lsiodev/buildcache,registry.gitlab.com/linuxserver.io/docker-jenkins-builder/lsiodev-buildcache,ghcr.io/linuxserver/lsiodev-buildcache,quay.io/linuxserver.io/lsiodev-buildcache' @@ -290,7 +290,7 @@ pipeline { // Use helper containers to render templated files stage('Update-Templates') { when { - branch "master" + branch "develop" environment name: 'CHANGE_ID', value: '' expression { env.CONTAINER_NAME != null @@ -302,24 +302,24 @@ pipeline { TEMPDIR=$(mktemp -d) docker pull ghcr.io/linuxserver/jenkins-builder:latest # Cloned repo paths for templating: - # ${TEMPDIR}/docker-${CONTAINER_NAME}: Cloned branch master of ${LS_USER}/${LS_REPO} for running the jenkins builder on - # ${TEMPDIR}/repo/${LS_REPO}: Cloned branch master of ${LS_USER}/${LS_REPO} for commiting various templated file changes and pushing back to Github + # ${TEMPDIR}/docker-${CONTAINER_NAME}: Cloned branch develop of ${LS_USER}/${LS_REPO} for running the jenkins builder on + # ${TEMPDIR}/repo/${LS_REPO}: Cloned branch develop of ${LS_USER}/${LS_REPO} for commiting various templated file changes and pushing back to Github # ${TEMPDIR}/docs/docker-documentation: Cloned docs repo for pushing docs updates to Github # ${TEMPDIR}/unraid/docker-templates: Cloned docker-templates repo to check for logos # ${TEMPDIR}/unraid/templates: Cloned templates repo for commiting unraid template changes and pushing back to Github - git clone --branch master --depth 1 https://github.com/${LS_USER}/${LS_REPO}.git ${TEMPDIR}/docker-${CONTAINER_NAME} + git clone --branch develop --depth 1 https://github.com/${LS_USER}/${LS_REPO}.git ${TEMPDIR}/docker-${CONTAINER_NAME} docker run --rm -v ${TEMPDIR}/docker-${CONTAINER_NAME}:/tmp -e LOCAL=true -e PUID=$(id -u) -e PGID=$(id -g) ghcr.io/linuxserver/jenkins-builder:latest echo "Starting Stage 1 - Jenkinsfile update" if [[ "$(md5sum Jenkinsfile | awk '{ print $1 }')" != "$(md5sum ${TEMPDIR}/docker-${CONTAINER_NAME}/Jenkinsfile | awk '{ print $1 }')" ]]; then mkdir -p ${TEMPDIR}/repo git clone https://github.com/${LS_USER}/${LS_REPO}.git ${TEMPDIR}/repo/${LS_REPO} cd ${TEMPDIR}/repo/${LS_REPO} - git checkout -f master + git checkout -f develop cp ${TEMPDIR}/docker-${CONTAINER_NAME}/Jenkinsfile ${TEMPDIR}/repo/${LS_REPO}/ git add Jenkinsfile git commit -m 'Bot Updating Templated Files' - git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master - git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master + git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git develop + git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git develop echo "true" > /tmp/${COMMIT_SHA}-${BUILD_NUMBER} echo "Updating Jenkinsfile and exiting build, new one will trigger based on commit" rm -Rf ${TEMPDIR} @@ -338,13 +338,13 @@ pipeline { mkdir -p ${TEMPDIR}/repo git clone https://github.com/${LS_USER}/${LS_REPO}.git ${TEMPDIR}/repo/${LS_REPO} cd ${TEMPDIR}/repo/${LS_REPO} - git checkout -f master + git checkout -f develop for i in ${TEMPLATES_TO_DELETE}; do git rm "${i}" done git commit -m 'Bot Updating Templated Files' - git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master - git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master + git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git develop + git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git develop echo "true" > /tmp/${COMMIT_SHA}-${BUILD_NUMBER} echo "Deleting old/deprecated templates and exiting build, new one will trigger based on commit" rm -Rf ${TEMPDIR} @@ -360,7 +360,7 @@ pipeline { mkdir -p ${TEMPDIR}/repo git clone https://github.com/${LS_USER}/${LS_REPO}.git ${TEMPDIR}/repo/${LS_REPO} cd ${TEMPDIR}/repo/${LS_REPO} - git checkout -f master + git checkout -f develop cd ${TEMPDIR}/docker-${CONTAINER_NAME} mkdir -p ${TEMPDIR}/repo/${LS_REPO}/.github/workflows mkdir -p ${TEMPDIR}/repo/${LS_REPO}/.github/ISSUE_TEMPLATE @@ -373,8 +373,8 @@ pipeline { fi git add readme-vars.yml ${TEMPLATED_FILES} git commit -m 'Bot Updating Templated Files' - git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master - git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master + git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git develop + git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git develop echo "true" > /tmp/${COMMIT_SHA}-${BUILD_NUMBER} echo "Updating templates and exiting build, new one will trigger based on commit" rm -Rf ${TEMPDIR} @@ -441,7 +441,7 @@ pipeline { // Exit the build if the Templated files were just updated stage('Template-exit') { when { - branch "master" + branch "develop" environment name: 'CHANGE_ID', value: '' environment name: 'FILES_UPDATED', value: 'true' expression { @@ -454,10 +454,10 @@ pipeline { } } } - // If this is a master build check the S6 service file perms + // If this is a develop build check the S6 service file perms stage("Check S6 Service file Permissions"){ when { - branch "master" + branch "develop" environment name: 'CHANGE_ID', value: '' environment name: 'EXIT_STATUS', value: '' } @@ -702,7 +702,7 @@ pipeline { // Take the image we just built and dump package versions for comparison stage('Update-packages') { when { - branch "master" + branch "develop" environment name: 'CHANGE_ID', value: '' environment name: 'EXIT_STATUS', value: '' } @@ -725,14 +725,14 @@ pipeline { echo "Package tag sha from current packages in buit container is ${NEW_PACKAGE_TAG} comparing to old ${PACKAGE_TAG} from github" if [ "${NEW_PACKAGE_TAG}" != "${PACKAGE_TAG}" ]; then git clone https://github.com/${LS_USER}/${LS_REPO}.git ${TEMPDIR}/${LS_REPO} - git --git-dir ${TEMPDIR}/${LS_REPO}/.git checkout -f master + git --git-dir ${TEMPDIR}/${LS_REPO}/.git checkout -f develop cp ${TEMPDIR}/package_versions.txt ${TEMPDIR}/${LS_REPO}/ cd ${TEMPDIR}/${LS_REPO}/ wait git add package_versions.txt git commit -m 'Bot Updating Package Versions' - git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master - git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master + git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git develop + git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git develop echo "true" > /tmp/packages-${COMMIT_SHA}-${BUILD_NUMBER} echo "Package tag updated, stopping build process" else @@ -750,7 +750,7 @@ pipeline { // Exit the build if the package file was just updated stage('PACKAGE-exit') { when { - branch "master" + branch "develop" environment name: 'CHANGE_ID', value: '' environment name: 'PACKAGE_UPDATED', value: 'true' environment name: 'EXIT_STATUS', value: '' @@ -764,7 +764,7 @@ pipeline { // Exit the build if this is just a package check and there are no changes to push stage('PACKAGECHECK-exit') { when { - branch "master" + branch "develop" environment name: 'CHANGE_ID', value: '' environment name: 'PACKAGE_UPDATED', value: 'false' environment name: 'EXIT_STATUS', value: '' @@ -818,7 +818,7 @@ pipeline { -e DOCKER_LOGS_TIMEOUT=\"${CI_DELAY}\" \ -e TAGS=\"${CI_TAGS}\" \ -e META_TAG=\"${META_TAG}\" \ - -e RELEASE_TAG=\"latest\" \ + -e RELEASE_TAG=\"develop\" \ -e PORT=\"${CI_PORT}\" \ -e SSL=\"${CI_SSL}\" \ -e BASE=\"${DIST_IMAGE}\" \ @@ -856,7 +856,7 @@ pipeline { CACHEIMAGE=${i} fi done - docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${META_TAG} -t ${PUSHIMAGE}:latest -t ${PUSHIMAGE}:${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} + docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${META_TAG} -t ${PUSHIMAGE}:develop -t ${PUSHIMAGE}:${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} if [ -n "${SEMVER}" ]; then docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${SEMVER} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} fi @@ -883,15 +883,15 @@ pipeline { CACHEIMAGE=${i} fi done - docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${META_TAG} -t ${MANIFESTIMAGE}:amd64-latest -t ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} - docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${META_TAG} -t ${MANIFESTIMAGE}:arm64v8-latest -t ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${META_TAG} -t ${MANIFESTIMAGE}:amd64-develop -t ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${META_TAG} -t ${MANIFESTIMAGE}:arm64v8-develop -t ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} if [ -n "${SEMVER}" ]; then docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${SEMVER} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${SEMVER} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} fi done for MANIFESTIMAGE in "${IMAGE}" "${GITLABIMAGE}" "${GITHUBIMAGE}" "${QUAYIMAGE}"; do - docker buildx imagetools create -t ${MANIFESTIMAGE}:latest ${MANIFESTIMAGE}:amd64-latest ${MANIFESTIMAGE}:arm64v8-latest + docker buildx imagetools create -t ${MANIFESTIMAGE}:develop ${MANIFESTIMAGE}:amd64-develop ${MANIFESTIMAGE}:arm64v8-develop docker buildx imagetools create -t ${MANIFESTIMAGE}:${META_TAG} ${MANIFESTIMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:arm64v8-${META_TAG} docker buildx imagetools create -t ${MANIFESTIMAGE}:${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} @@ -906,7 +906,7 @@ pipeline { // If this is a public release tag it in the LS Github stage('Github-Tag-Push-Release') { when { - branch "master" + branch "develop" expression { env.LS_RELEASE != env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER } @@ -918,17 +918,17 @@ pipeline { sh '''curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/git/tags \ -d '{"tag":"'${META_TAG}'",\ "object": "'${COMMIT_SHA}'",\ - "message": "Tagging Release '${EXT_RELEASE_CLEAN}'-ls'${LS_TAG_NUMBER}' to master",\ + "message": "Tagging Release '${EXT_RELEASE_CLEAN}'-ls'${LS_TAG_NUMBER}' to develop",\ "type": "commit",\ "tagger": {"name": "LinuxServer-CI","email": "ci@linuxserver.io","date": "'${GITHUB_DATE}'"}}' ''' echo "Pushing New release for Tag" sh '''#! /bin/bash echo "Updating base packages to ${PACKAGE_TAG}" > releasebody.json echo '{"tag_name":"'${META_TAG}'",\ - "target_commitish": "master",\ + "target_commitish": "develop",\ "name": "'${META_TAG}'",\ "body": "**CI Report:**\\n\\n'${CI_URL:-N/A}'\\n\\n**LinuxServer Changes:**\\n\\n'${LS_RELEASE_NOTES}'\\n\\n**Remote Changes:**\\n\\n' > start - printf '","draft": false,"prerelease": false}' >> releasebody.json + printf '","draft": false,"prerelease": true}' >> releasebody.json paste -d'\\0' start releasebody.json > releasebody.json.done curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/releases -d @releasebody.json.done''' } @@ -936,14 +936,14 @@ pipeline { // Add protection to the release branch stage('Github-Release-Branch-Protection') { when { - branch "master" + branch "develop" environment name: 'CHANGE_ID', value: '' environment name: 'EXIT_STATUS', value: '' } steps { - echo "Setting up protection for release branch master" + echo "Setting up protection for release branch develop" sh '''#! /bin/bash - curl -H "Authorization: token ${GITHUB_TOKEN}" -X PUT https://api.github.com/repos/${LS_USER}/${LS_REPO}/branches/master/protection \ + curl -H "Authorization: token ${GITHUB_TOKEN}" -X PUT https://api.github.com/repos/${LS_USER}/${LS_REPO}/branches/develop/protection \ -d $(jq -c . << EOF { "required_status_checks": null, diff --git a/README.md b/README.md index f5ead7d..0d4df95 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,5 @@ - + [linuxserverurl]: https://linuxserver.io [forumurl]: https://discourse.linuxserver.io [huburl]: https://hub.docker.com/r/linuxserver/ci/ diff --git a/jenkins-vars.yml b/jenkins-vars.yml index d6cb02b..c38ff5a 100644 --- a/jenkins-vars.yml +++ b/jenkins-vars.yml @@ -3,9 +3,9 @@ # jenkins variables project_name: docker-ci external_type: os -release_type: stable -release_tag: latest -ls_branch: master +release_type: prerelease +release_tag: develop +ls_branch: develop repo_vars: - BUILD_VERSION_ARG = 'OS' - LS_USER = 'linuxserver' From e05fc493c49485d8f47aa08eff046e6bf96ec0ec Mon Sep 17 00:00:00 2001 From: LinuxServer-CI Date: Sat, 4 Oct 2025 20:20:29 +0000 Subject: [PATCH 05/12] Bot Updating Package Versions --- package_versions.txt | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/package_versions.txt b/package_versions.txt index ba8fb01..884eaab 100755 --- a/package_versions.txt +++ b/package_versions.txt @@ -43,9 +43,9 @@ debianutils 5. diffutils 1:3.10-1build1 deb dirmngr 2.4.4-2ubuntu17.3 deb docker 6.0.1 python -docker-ce 5:28.4.0-1~ubuntu.24.04~noble deb -docker-ce-cli 5:28.4.0-1~ubuntu.24.04~noble deb -dpkg 1.22.6ubuntu6.2 deb +docker-ce 5:28.5.0-1~ubuntu.24.04~noble deb +docker-ce-cli 5:28.5.0-1~ubuntu.24.04~noble deb +dpkg 1.22.6ubuntu6.5 deb e2fsprogs 1.47.0-2.4~exp1ubuntu4.1 deb findutils 4.9.0-5build1 deb fontconfig 2.15.0-1.1ubuntu2 deb @@ -138,7 +138,7 @@ github.com/dimchansky/utfbom v1 github.com/distribution/reference v0.6.0 go-module (+2 duplicates) github.com/docker/cli/cmd/docker UNKNOWN go-module github.com/docker/distribution v2.8.3+incompatible go-module -github.com/docker/docker v28.4.0 go-module (+1 duplicate) +github.com/docker/docker v28.5.0 go-module (+1 duplicate) github.com/docker/go-connections v0.5.0 go-module github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c go-module (+3 duplicates) github.com/docker/go-events v0.0.0-20250114142523-c867878c5e32 go-module @@ -206,7 +206,7 @@ github.com/mistifyio/go-zfs/v3 v3 github.com/mitchellh/copystructure v1.2.0 go-module github.com/mitchellh/hashstructure/v2 v2.0.2 go-module github.com/mitchellh/reflectwalk v1.0.2 go-module -github.com/moby/buildkit v0.24.0 go-module +github.com/moby/buildkit v0.25.0 go-module github.com/moby/docker-image-spec v1.3.1 go-module github.com/moby/go-archive v0.1.0 go-module github.com/moby/ipvs v1.1.0 go-module @@ -355,7 +355,7 @@ golang.org/x/text v0 golang.org/x/text v0.27.0 go-module (+2 duplicates) golang.org/x/time v0.11.0 go-module golang.org/x/time v0.12.0 go-module -google-chrome-stable 140.0.7339.207-1 deb +google-chrome-stable 141.0.7390.54-1 deb google.golang.org/api v0.160.0 go-module google.golang.org/genproto v0.0.0-20231211222908-989df2bf70f3 go-module (+4 duplicates) google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de go-module @@ -367,7 +367,7 @@ google.golang.org/grpc v1 google.golang.org/grpc v1.72.2 go-module google.golang.org/protobuf v1.35.2 go-module (+4 duplicates) google.golang.org/protobuf v1.36.5 go-module -google.golang.org/protobuf v1.36.6 go-module +google.golang.org/protobuf v1.36.9 go-module gopkg.in/inf.v0 v0.9.1 go-module (+1 duplicate) gopkg.in/yaml.v2 v2.4.0 go-module (+1 duplicate) gopkg.in/yaml.v3 v3.0.1 go-module (+1 duplicate) @@ -547,14 +547,14 @@ libsmartcols1 2. libsqlite3-0 3.45.1-1ubuntu2.5 deb libss2 1.47.0-2.4~exp1ubuntu4.1 deb libssh-4 0.10.6-2ubuntu0.1 deb -libssl3t64 3.0.13-0ubuntu3.5 deb +libssl3t64 3.0.13-0ubuntu3.6 deb libstdc++6 14.2.0-4ubuntu2~24.04 deb libsystemd-shared 255.4-1ubuntu8.10 deb libsystemd0 255.4-1ubuntu8.10 deb libtasn1-6 4.19.0-3ubuntu0.24.04.1 deb libthai-data 0.1.29-2build1 deb libthai0 0.1.29-2build1 deb -libtiff6 4.5.1+git230720-4ubuntu2.3 deb +libtiff6 4.5.1+git230720-4ubuntu2.4 deb libtinfo6 6.4+20240113-1ubuntu2 deb libudev1 255.4-1ubuntu8.10 deb libunistring5 1.1-2build1.1 deb @@ -623,7 +623,7 @@ ncurses-base 6. ncurses-bin 6.4+20240113-1ubuntu2 deb netbase 6.4 deb netcat-openbsd 1.226-1ubuntu2 deb -openssl 3.0.13-0ubuntu3.5 deb +openssl 3.0.13-0ubuntu3.6 deb outcome 1.3.0.post0 python packaging 25.0 python passwd 1:4.13+dfsg1-4ubuntu3.2 deb From 2f54ec43b60c9f8b8e07c473845bdbb1b378b8d3 Mon Sep 17 00:00:00 2001 From: LinuxServer-CI Date: Sun, 12 Oct 2025 03:45:37 +0000 Subject: [PATCH 06/12] Bot Updating Package Versions --- package_versions.txt | 34 +++++++++++++++++----------------- 1 file changed, 17 insertions(+), 17 deletions(-) diff --git a/package_versions.txt b/package_versions.txt index 884eaab..da7c830 100755 --- a/package_versions.txt +++ b/package_versions.txt @@ -7,7 +7,7 @@ anybadge 1. apt 2.8.3 deb apt-utils 2.8.3 deb at-spi2-common 2.52.0-1build1 deb -attrs 25.3.0 python +attrs 25.4.0 python base-files 13ubuntu10.3 deb base-passwd 3.6.3build1 deb bash 5.2.21-2ubuntu4 deb @@ -16,13 +16,13 @@ botocore 1. bsdutils 1:2.39.3-9ubuntu6.3 deb ca-certificates 20240203 deb catatonit 0.1.7-1 deb -certifi 2025.8.3 python +certifi 2025.10.5 python charset-normalizer 3.4.3 python cloud.google.com/go/compute/metadata v0.6.0 go-module cloud.google.com/go/logging v1.9.0 go-module cloud.google.com/go/longrunning v0.5.5 go-module code.cloudfoundry.org/clock v1.37.0 go-module -containerd.io 1.7.28-0~ubuntu.24.04~noble deb +containerd.io 1.7.28-1~ubuntu.24.04~noble deb coreutils 9.4-3ubuntu6.1 deb cron 3.0pl1-184ubuntu2 deb cron-daemon-common 3.0pl1-184ubuntu2 deb @@ -43,8 +43,8 @@ debianutils 5. diffutils 1:3.10-1build1 deb dirmngr 2.4.4-2ubuntu17.3 deb docker 6.0.1 python -docker-ce 5:28.5.0-1~ubuntu.24.04~noble deb -docker-ce-cli 5:28.5.0-1~ubuntu.24.04~noble deb +docker-ce 5:28.5.1-1~ubuntu.24.04~noble deb +docker-ce-cli 5:28.5.1-1~ubuntu.24.04~noble deb dpkg 1.22.6ubuntu6.5 deb e2fsprogs 1.47.0-2.4~exp1ubuntu4.1 deb findutils 4.9.0-5build1 deb @@ -138,7 +138,7 @@ github.com/dimchansky/utfbom v1 github.com/distribution/reference v0.6.0 go-module (+2 duplicates) github.com/docker/cli/cmd/docker UNKNOWN go-module github.com/docker/distribution v2.8.3+incompatible go-module -github.com/docker/docker v28.5.0 go-module (+1 duplicate) +github.com/docker/docker v28.5.1 go-module (+1 duplicate) github.com/docker/go-connections v0.5.0 go-module github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c go-module (+3 duplicates) github.com/docker/go-events v0.0.0-20250114142523-c867878c5e32 go-module @@ -206,7 +206,7 @@ github.com/mistifyio/go-zfs/v3 v3 github.com/mitchellh/copystructure v1.2.0 go-module github.com/mitchellh/hashstructure/v2 v2.0.2 go-module github.com/mitchellh/reflectwalk v1.0.2 go-module -github.com/moby/buildkit v0.25.0 go-module +github.com/moby/buildkit v0.25.1 go-module github.com/moby/docker-image-spec v1.3.1 go-module github.com/moby/go-archive v0.1.0 go-module github.com/moby/ipvs v1.1.0 go-module @@ -355,7 +355,7 @@ golang.org/x/text v0 golang.org/x/text v0.27.0 go-module (+2 duplicates) golang.org/x/time v0.11.0 go-module golang.org/x/time v0.12.0 go-module -google-chrome-stable 141.0.7390.54-1 deb +google-chrome-stable 141.0.7390.76-1 deb google.golang.org/api v0.160.0 go-module google.golang.org/genproto v0.0.0-20231211222908-989df2bf70f3 go-module (+4 duplicates) google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de go-module @@ -515,7 +515,7 @@ libp11-kit0 0. libpam-modules 1.5.3-5ubuntu5.5 deb libpam-modules-bin 1.5.3-5ubuntu5.5 deb libpam-runtime 1.5.3-5ubuntu5.5 deb -libpam-systemd 255.4-1ubuntu8.10 deb +libpam-systemd 255.4-1ubuntu8.11 deb libpam0g 1.5.3-5ubuntu5.5 deb libpango-1.0-0 1.52.1+ds-1build1 deb libpangocairo-1.0-0 1.52.1+ds-1build1 deb @@ -549,14 +549,14 @@ libss2 1. libssh-4 0.10.6-2ubuntu0.1 deb libssl3t64 3.0.13-0ubuntu3.6 deb libstdc++6 14.2.0-4ubuntu2~24.04 deb -libsystemd-shared 255.4-1ubuntu8.10 deb -libsystemd0 255.4-1ubuntu8.10 deb +libsystemd-shared 255.4-1ubuntu8.11 deb +libsystemd0 255.4-1ubuntu8.11 deb libtasn1-6 4.19.0-3ubuntu0.24.04.1 deb libthai-data 0.1.29-2build1 deb libthai0 0.1.29-2build1 deb libtiff6 4.5.1+git230720-4ubuntu2.4 deb libtinfo6 6.4+20240113-1ubuntu2 deb -libudev1 255.4-1ubuntu8.10 deb +libudev1 255.4-1ubuntu8.11 deb libunistring5 1.1-2build1.1 deb libunwind8 1.6.2-3build1.1 deb libuuid1 2.39.3-9ubuntu6.3 deb @@ -659,10 +659,10 @@ sigs.k8s.io/yaml v1 six 1.17.0 python sniffio 1.3.1 python sortedcontainers 2.4.0 python -stdlib go1.24.7 go-module (+8 duplicates) -systemd 255.4-1ubuntu8.10 deb -systemd-dev 255.4-1ubuntu8.10 deb -systemd-sysv 255.4-1ubuntu8.10 deb +stdlib go1.24.8 go-module (+8 duplicates) +systemd 255.4-1ubuntu8.11 deb +systemd-dev 255.4-1ubuntu8.11 deb +systemd-sysv 255.4-1ubuntu8.11 deb sysvinit-utils 3.08-6ubuntu3 deb tags.cncf.io/container-device-interface v0.8.1 go-module tags.cncf.io/container-device-interface v1.0.1 go-module @@ -678,7 +678,7 @@ unminimize 0. unzip 6.0-28ubuntu4.1 deb urllib3 1.26.20 python util-linux 2.39.3-9ubuntu6.3 deb -websocket-client 1.8.0 python +websocket-client 1.9.0 python wget 1.21.4-1ubuntu4.1 deb wsproto 1.2.0 python x11-common 1:7.7+23ubuntu3 deb From 949f1d42c4cb9c72ba2fb68d8958f81a7116e64b Mon Sep 17 00:00:00 2001 From: LinuxServer-CI Date: Sun, 19 Oct 2025 03:56:59 +0000 Subject: [PATCH 07/12] Bot Updating Package Versions --- package_versions.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package_versions.txt b/package_versions.txt index da7c830..ec6e9ae 100755 --- a/package_versions.txt +++ b/package_versions.txt @@ -17,7 +17,7 @@ bsdutils 1: ca-certificates 20240203 deb catatonit 0.1.7-1 deb certifi 2025.10.5 python -charset-normalizer 3.4.3 python +charset-normalizer 3.4.4 python cloud.google.com/go/compute/metadata v0.6.0 go-module cloud.google.com/go/logging v1.9.0 go-module cloud.google.com/go/longrunning v0.5.5 go-module @@ -355,7 +355,7 @@ golang.org/x/text v0 golang.org/x/text v0.27.0 go-module (+2 duplicates) golang.org/x/time v0.11.0 go-module golang.org/x/time v0.12.0 go-module -google-chrome-stable 141.0.7390.76-1 deb +google-chrome-stable 141.0.7390.107-1 deb google.golang.org/api v0.160.0 go-module google.golang.org/genproto v0.0.0-20231211222908-989df2bf70f3 go-module (+4 duplicates) google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de go-module @@ -384,7 +384,7 @@ h11 0. hicolor-icon-theme 0.17-2 deb hostname 3.23+nmu2ubuntu2 deb humanity-icon-theme 0.6.16 deb -idna 3.10 python +idna 3.11 python init-system-helpers 1.66ubuntu1 deb iptables 1.8.10-3ubuntu2 deb jinja2 3.1.2 python From 59a5f2fc176b5561f04b287292aa49e739a1fc50 Mon Sep 17 00:00:00 2001 From: LinuxServer-CI Date: Tue, 21 Oct 2025 18:51:06 +0000 Subject: [PATCH 08/12] Bot Updating Templated Files --- Jenkinsfile | 108 +++++++++++++++++++++++++++++++++++----------------- 1 file changed, 73 insertions(+), 35 deletions(-) diff --git a/Jenkinsfile b/Jenkinsfile index 5744d74..8e7af0d 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -206,6 +206,7 @@ pipeline { env.META_TAG = 'develop-' + env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER env.EXT_RELEASE_TAG = 'develop-version-' + env.EXT_RELEASE_CLEAN env.BUILDCACHE = 'docker.io/lsiodev/buildcache,registry.gitlab.com/linuxserver.io/docker-jenkins-builder/lsiodev-buildcache,ghcr.io/linuxserver/lsiodev-buildcache,quay.io/linuxserver.io/lsiodev-buildcache' + env.CITEST_IMAGETAG = 'latest' } } } @@ -231,6 +232,7 @@ pipeline { env.EXT_RELEASE_TAG = 'develop-version-' + env.EXT_RELEASE_CLEAN env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.DEV_DOCKERHUB_IMAGE + '/tags/' env.BUILDCACHE = 'docker.io/lsiodev/buildcache,registry.gitlab.com/linuxserver.io/docker-jenkins-builder/lsiodev-buildcache,ghcr.io/linuxserver/lsiodev-buildcache,quay.io/linuxserver.io/lsiodev-buildcache' + env.CITEST_IMAGETAG = 'develop' } } } @@ -256,6 +258,7 @@ pipeline { env.CODE_URL = 'https://github.com/' + env.LS_USER + '/' + env.LS_REPO + '/pull/' + env.PULL_REQUEST env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.PR_DOCKERHUB_IMAGE + '/tags/' env.BUILDCACHE = 'docker.io/lsiodev/buildcache,registry.gitlab.com/linuxserver.io/docker-jenkins-builder/lsiodev-buildcache,ghcr.io/linuxserver/lsiodev-buildcache,quay.io/linuxserver.io/lsiodev-buildcache' + env.CITEST_IMAGETAG = 'develop' } } } @@ -278,7 +281,7 @@ pipeline { -v ${WORKSPACE}:/mnt \ -e AWS_ACCESS_KEY_ID=\"${S3_KEY}\" \ -e AWS_SECRET_ACCESS_KEY=\"${S3_SECRET}\" \ - ghcr.io/linuxserver/baseimage-alpine:3.20 s6-envdir -fn -- /var/run/s6/container_environment /bin/bash -c "\ + ghcr.io/linuxserver/baseimage-alpine:3 s6-envdir -fn -- /var/run/s6/container_environment /bin/bash -c "\ apk add --no-cache python3 && \ python3 -m venv /lsiopy && \ pip install --no-cache-dir -U pip && \ @@ -550,13 +553,16 @@ pipeline { echo $GITHUB_TOKEN | docker login ghcr.io -u LinuxServer-CI --password-stdin echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin echo $QUAYPASS | docker login quay.io -u $QUAYUSER --password-stdin + if [[ "${PACKAGE_CHECK}" != "true" ]]; then + declare -A pids IFS=',' read -ra CACHE <<< "$BUILDCACHE" for i in "${CACHE[@]}"; do docker push ${i}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} & + pids[$!]="$i" done - for p in $(jobs -p); do - wait "$p" || { echo "job $p failed" >&2; exit 1; } + for p in "${!pids[@]}"; do + wait "$p" || { [[ "${pids[$p]}" != *"quay.io"* ]] && exit 1; } done fi ''' @@ -616,13 +622,16 @@ pipeline { echo $GITHUB_TOKEN | docker login ghcr.io -u LinuxServer-CI --password-stdin echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin echo $QUAYPASS | docker login quay.io -u $QUAYUSER --password-stdin + if [[ "${PACKAGE_CHECK}" != "true" ]]; then + declare -A pids IFS=',' read -ra CACHE <<< "$BUILDCACHE" for i in "${CACHE[@]}"; do docker push ${i}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} & + pids[$!]="$i" done - for p in $(jobs -p); do - wait "$p" || { echo "job $p failed" >&2; exit 1; } + for p in "${!pids[@]}"; do + wait "$p" || { [[ "${pids[$p]}" != *"quay.io"* ]] && exit 1; } done fi ''' @@ -676,12 +685,14 @@ pipeline { echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin echo $QUAYPASS | docker login quay.io -u $QUAYUSER --password-stdin if [[ "${PACKAGE_CHECK}" != "true" ]]; then + declare -A pids IFS=',' read -ra CACHE <<< "$BUILDCACHE" for i in "${CACHE[@]}"; do docker push ${i}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} & + pids[$!]="$i" done - for p in $(jobs -p); do - wait "$p" || { echo "job $p failed" >&2; exit 1; } + for p in "${!pids[@]}"; do + wait "$p" || { [[ "${pids[$p]}" != *"quay.io"* ]] && exit 1; } done fi ''' @@ -806,7 +817,7 @@ pipeline { CI_DOCKERENV="LSIO_FIRST_PARTY=true" fi fi - docker pull ghcr.io/linuxserver/ci:latest + docker pull ghcr.io/linuxserver/ci:${CITEST_IMAGETAG} if [ "${MULTIARCH}" == "true" ]; then docker pull ghcr.io/linuxserver/lsiodev-buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} --platform=arm64 docker tag ghcr.io/linuxserver/lsiodev-buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} ${IMAGE}:arm64v8-${META_TAG} @@ -830,7 +841,7 @@ pipeline { -e WEB_PATH=\"${CI_WEBPATH}\" \ -e NODE_NAME=\"${NODE_NAME}\" \ -e SYFT_IMAGE_TAG=\"${CI_SYFT_IMAGE_TAG:-${SYFT_IMAGE_TAG}}\" \ - -t ghcr.io/linuxserver/ci:latest \ + -t ghcr.io/linuxserver/ci:${CITEST_IMAGETAG} \ python3 test_build.py''' } } @@ -856,9 +867,11 @@ pipeline { CACHEIMAGE=${i} fi done - docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${META_TAG} -t ${PUSHIMAGE}:develop -t ${PUSHIMAGE}:${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} + docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${META_TAG} -t ${PUSHIMAGE}:develop -t ${PUSHIMAGE}:${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${PUSHIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } if [ -n "${SEMVER}" ]; then - docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${SEMVER} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} + docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${SEMVER} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${PUSHIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } fi done ''' @@ -883,20 +896,27 @@ pipeline { CACHEIMAGE=${i} fi done - docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${META_TAG} -t ${MANIFESTIMAGE}:amd64-develop -t ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} - docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${META_TAG} -t ${MANIFESTIMAGE}:arm64v8-develop -t ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${META_TAG} -t ${MANIFESTIMAGE}:amd64-develop -t ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${META_TAG} -t ${MANIFESTIMAGE}:arm64v8-develop -t ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } if [ -n "${SEMVER}" ]; then - docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${SEMVER} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} - docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${SEMVER} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${SEMVER} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${SEMVER} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } fi done for MANIFESTIMAGE in "${IMAGE}" "${GITLABIMAGE}" "${GITHUBIMAGE}" "${QUAYIMAGE}"; do - docker buildx imagetools create -t ${MANIFESTIMAGE}:develop ${MANIFESTIMAGE}:amd64-develop ${MANIFESTIMAGE}:arm64v8-develop - docker buildx imagetools create -t ${MANIFESTIMAGE}:${META_TAG} ${MANIFESTIMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:arm64v8-${META_TAG} - - docker buildx imagetools create -t ${MANIFESTIMAGE}:${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} + docker buildx imagetools create -t ${MANIFESTIMAGE}:develop ${MANIFESTIMAGE}:amd64-develop ${MANIFESTIMAGE}:arm64v8-develop || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + docker buildx imagetools create -t ${MANIFESTIMAGE}:${META_TAG} ${MANIFESTIMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:arm64v8-${META_TAG} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + docker buildx imagetools create -t ${MANIFESTIMAGE}:${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } if [ -n "${SEMVER}" ]; then - docker buildx imagetools create -t ${MANIFESTIMAGE}:${SEMVER} ${MANIFESTIMAGE}:amd64-${SEMVER} ${MANIFESTIMAGE}:arm64v8-${SEMVER} + docker buildx imagetools create -t ${MANIFESTIMAGE}:${SEMVER} ${MANIFESTIMAGE}:amd64-${SEMVER} ${MANIFESTIMAGE}:arm64v8-${SEMVER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } fi done ''' @@ -914,23 +934,41 @@ pipeline { environment name: 'EXIT_STATUS', value: '' } steps { - echo "Pushing New tag for current commit ${META_TAG}" - sh '''curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/git/tags \ - -d '{"tag":"'${META_TAG}'",\ - "object": "'${COMMIT_SHA}'",\ - "message": "Tagging Release '${EXT_RELEASE_CLEAN}'-ls'${LS_TAG_NUMBER}' to develop",\ - "type": "commit",\ - "tagger": {"name": "LinuxServer-CI","email": "ci@linuxserver.io","date": "'${GITHUB_DATE}'"}}' ''' - echo "Pushing New release for Tag" sh '''#! /bin/bash + echo "Auto-generating release notes" + if [ "$(git tag --points-at HEAD)" != "" ]; then + echo "Existing tag points to current commit, suggesting no new LS changes" + AUTO_RELEASE_NOTES="No changes" + else + AUTO_RELEASE_NOTES=$(curl -fsL -H "Authorization: token ${GITHUB_TOKEN}" -H "Accept: application/vnd.github+json" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/releases/generate-notes \ + -d '{"tag_name":"'${META_TAG}'",\ + "target_commitish": "develop"}' \ + | jq -r '.body' | sed 's|## What.s Changed||') + fi + echo "Pushing New tag for current commit ${META_TAG}" + curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/git/tags \ + -d '{"tag":"'${META_TAG}'",\ + "object": "'${COMMIT_SHA}'",\ + "message": "Tagging Release '${EXT_RELEASE_CLEAN}'-ls'${LS_TAG_NUMBER}' to develop",\ + "type": "commit",\ + "tagger": {"name": "LinuxServer-CI","email": "ci@linuxserver.io","date": "'${GITHUB_DATE}'"}}' + echo "Pushing New release for Tag" echo "Updating base packages to ${PACKAGE_TAG}" > releasebody.json - echo '{"tag_name":"'${META_TAG}'",\ - "target_commitish": "develop",\ - "name": "'${META_TAG}'",\ - "body": "**CI Report:**\\n\\n'${CI_URL:-N/A}'\\n\\n**LinuxServer Changes:**\\n\\n'${LS_RELEASE_NOTES}'\\n\\n**Remote Changes:**\\n\\n' > start - printf '","draft": false,"prerelease": true}' >> releasebody.json - paste -d'\\0' start releasebody.json > releasebody.json.done - curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/releases -d @releasebody.json.done''' + jq -n \ + --arg tag_name "$META_TAG" \ + --arg target_commitish "develop" \ + --arg ci_url "${CI_URL:-N/A}" \ + --arg ls_notes "$AUTO_RELEASE_NOTES" \ + --arg remote_notes "$(cat releasebody.json)" \ + '{ + "tag_name": $tag_name, + "target_commitish": $target_commitish, + "name": $tag_name, + "body": ("**CI Report:**\\n\\n" + $ci_url + "\\n\\n**LinuxServer Changes:**\\n\\n" + $ls_notes + "\\n\\n**Remote Changes:**\\n\\n" + $remote_notes), + "draft": false, + "prerelease": true }' > releasebody.json.done + curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/releases -d @releasebody.json.done + ''' } } // Add protection to the release branch From 6f6ec7796dd205d5865d53b7a22b249eb97a2e99 Mon Sep 17 00:00:00 2001 From: LinuxServer-CI Date: Tue, 21 Oct 2025 18:56:43 +0000 Subject: [PATCH 09/12] Bot Updating Package Versions --- package_versions.txt | 257 ++++++++++++++++++++++++++----------------- 1 file changed, 156 insertions(+), 101 deletions(-) diff --git a/package_versions.txt b/package_versions.txt index ec6e9ae..efd1757 100755 --- a/package_versions.txt +++ b/package_versions.txt @@ -43,6 +43,7 @@ debianutils 5. diffutils 1:3.10-1build1 deb dirmngr 2.4.4-2ubuntu17.3 deb docker 6.0.1 python +docker-buildx-plugin 0.29.1-1~ubuntu.24.04~noble deb docker-ce 5:28.5.1-1~ubuntu.24.04~noble deb docker-ce-cli 5:28.5.1-1~ubuntu.24.04~noble deb dpkg 1.22.6ubuntu6.5 deb @@ -56,39 +57,43 @@ github.com/Azure/azure-sdk-for-go/sdk/azcore v1 github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0 go-module github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.5.0 go-module github.com/Graylog2/go-gelf v0.0.0-20191017102106-1550ee647df0 go-module +github.com/Masterminds/semver/v3 v3.4.0 go-module github.com/Microsoft/hcsshim v0.11.7 go-module (+1 duplicate) github.com/Microsoft/hcsshim v0.13.0 go-module github.com/RackSec/srslog v0.0.0-20180709174129-a4725f04ec91 go-module -github.com/agext/levenshtein v1.2.3 go-module +github.com/agext/levenshtein v1.2.3 go-module (+1 duplicate) github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 go-module +github.com/apparentlymart/go-cidr v1.0.1 go-module +github.com/apparentlymart/go-textseg/v15 v15.0.0 go-module github.com/armon/circbuf v0.0.0-20190214190532-5111143e8da2 go-module github.com/armon/go-metrics v0.4.1 go-module -github.com/aws/aws-sdk-go-v2 v1.30.3 go-module +github.com/aws/aws-sdk-go-v2 v1.30.3 go-module (+1 duplicate) github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 go-module -github.com/aws/aws-sdk-go-v2/config v1.27.27 go-module -github.com/aws/aws-sdk-go-v2/credentials v1.17.27 go-module -github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 go-module -github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 go-module -github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 go-module -github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 go-module +github.com/aws/aws-sdk-go-v2/config v1.27.27 go-module (+1 duplicate) +github.com/aws/aws-sdk-go-v2/credentials v1.17.27 go-module (+1 duplicate) +github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 go-module (+1 duplicate) +github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 go-module (+1 duplicate) +github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 go-module (+1 duplicate) +github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 go-module (+1 duplicate) github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.32.0 go-module -github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 go-module -github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 go-module -github.com/aws/aws-sdk-go-v2/service/sso v1.22.4 go-module -github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 go-module -github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 go-module -github.com/aws/smithy-go v1.20.3 go-module +github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 go-module (+1 duplicate) +github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 go-module (+1 duplicate) +github.com/aws/aws-sdk-go-v2/service/sso v1.22.4 go-module (+1 duplicate) +github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 go-module (+1 duplicate) +github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 go-module (+1 duplicate) +github.com/aws/smithy-go v1.20.3 go-module (+1 duplicate) github.com/beorn7/perks v1.0.1 go-module (+1 duplicate) github.com/bits-and-blooms/bitset v1.13.0 go-module github.com/blang/semver/v4 v4.0.0 go-module github.com/cenkalti/backoff/v4 v4.2.1 go-module -github.com/cenkalti/backoff/v4 v4.3.0 go-module +github.com/cenkalti/backoff/v4 v4.3.0 go-module (+1 duplicate) github.com/cespare/xxhash/v2 v2.2.0 go-module github.com/cespare/xxhash/v2 v2.3.0 go-module github.com/checkpoint-restore/go-criu/v6 v6.3.0 go-module github.com/cilium/ebpf v0.17.3 go-module (+1 duplicate) github.com/cilium/ebpf v0.9.1 go-module (+3 duplicates) github.com/cloudflare/cfssl v1.6.4 go-module +github.com/compose-spec/compose-go/v2 v2.9.0 go-module github.com/container-storage-interface/spec v1.5.0 go-module github.com/containerd/accelerated-container-image v1.3.0 go-module github.com/containerd/aufs v1.0.0 go-module @@ -98,32 +103,32 @@ github.com/containerd/cgroups/v3 v3 github.com/containerd/cgroups/v3 v3.0.5 go-module github.com/containerd/console v1.0.3 go-module (+4 duplicates) github.com/containerd/console v1.0.4 go-module -github.com/containerd/console v1.0.5 go-module +github.com/containerd/console v1.0.5 go-module (+1 duplicate) github.com/containerd/containerd v1.7.28 go-module (+4 duplicates) github.com/containerd/containerd/api v1.8.0 go-module (+4 duplicates) -github.com/containerd/containerd/api v1.9.0 go-module -github.com/containerd/containerd/v2 v2.1.4 go-module +github.com/containerd/containerd/api v1.9.0 go-module (+1 duplicate) +github.com/containerd/containerd/v2 v2.1.4 go-module (+1 duplicate) github.com/containerd/continuity v0.4.4 go-module (+4 duplicates) -github.com/containerd/continuity v0.4.5 go-module +github.com/containerd/continuity v0.4.5 go-module (+1 duplicate) github.com/containerd/errdefs v0.3.0 go-module (+4 duplicates) -github.com/containerd/errdefs v1.0.0 go-module -github.com/containerd/errdefs/pkg v0.3.0 go-module +github.com/containerd/errdefs v1.0.0 go-module (+1 duplicate) +github.com/containerd/errdefs/pkg v0.3.0 go-module (+1 duplicate) github.com/containerd/fifo v1.1.0 go-module (+5 duplicates) github.com/containerd/go-cni v1.1.12 go-module github.com/containerd/go-cni v1.1.9 go-module (+1 duplicate) github.com/containerd/go-runc v1.0.0 go-module (+4 duplicates) github.com/containerd/go-runc v1.1.0 go-module github.com/containerd/imgcrypt v1.1.8 go-module -github.com/containerd/log v0.1.0 go-module (+6 duplicates) +github.com/containerd/log v0.1.0 go-module (+7 duplicates) github.com/containerd/nri v0.8.0 go-module github.com/containerd/platforms v0.2.1 go-module (+3 duplicates) -github.com/containerd/platforms v1.0.0-rc.1 go-module +github.com/containerd/platforms v1.0.0-rc.1 go-module (+1 duplicate) github.com/containerd/plugin v1.0.0 go-module github.com/containerd/stargz-snapshotter/estargz v0.16.3 go-module -github.com/containerd/ttrpc v1.2.7 go-module (+5 duplicates) +github.com/containerd/ttrpc v1.2.7 go-module (+6 duplicates) github.com/containerd/typeurl v1.0.2 go-module github.com/containerd/typeurl/v2 v2.1.1 go-module (+4 duplicates) -github.com/containerd/typeurl/v2 v2.2.3 go-module +github.com/containerd/typeurl/v2 v2.2.3 go-module (+1 duplicate) github.com/containerd/zfs v1.1.0 go-module github.com/containernetworking/cni v1.1.2 go-module (+1 duplicate) github.com/containernetworking/cni v1.3.0 go-module @@ -132,116 +137,142 @@ github.com/containernetworking/plugins v1 github.com/containers/ocicrypt v1.1.10 go-module github.com/coreos/go-systemd/v22 v22.5.0 go-module (+5 duplicates) github.com/cyphar/filepath-securejoin v0.4.1 go-module (+1 duplicate) -github.com/davecgh/go-spew v1.1.1 go-module (+1 duplicate) +github.com/davecgh/go-spew v1.1.1 go-module (+2 duplicates) github.com/deckarep/golang-set/v2 v2.3.0 go-module github.com/dimchansky/utfbom v1.1.1 go-module -github.com/distribution/reference v0.6.0 go-module (+2 duplicates) +github.com/distribution/reference v0.6.0 go-module (+3 duplicates) +github.com/docker/buildx v0.29.1 go-module +github.com/docker/cli v28.4.0+incompatible go-module +github.com/docker/cli-docs-tool v0.10.0 go-module github.com/docker/cli/cmd/docker UNKNOWN go-module github.com/docker/distribution v2.8.3+incompatible go-module +github.com/docker/docker v28.4.0+incompatible go-module github.com/docker/docker v28.5.1 go-module (+1 duplicate) -github.com/docker/go-connections v0.5.0 go-module +github.com/docker/docker-credential-helpers v0.9.3 go-module +github.com/docker/go-connections v0.5.0 go-module (+1 duplicate) github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c go-module (+3 duplicates) github.com/docker/go-events v0.0.0-20250114142523-c867878c5e32 go-module github.com/docker/go-metrics v0.0.1 go-module (+1 duplicate) -github.com/docker/go-units v0.5.0 go-module (+5 duplicates) +github.com/docker/go-units v0.5.0 go-module (+6 duplicates) github.com/docker/libtrust v0.0.0-20150526203908-9cbd2a1374f4 go-module github.com/dustin/go-humanize v1.0.0 go-module github.com/emicklei/go-restful/v3 v3.10.1 go-module +github.com/emicklei/go-restful/v3 v3.11.0 go-module github.com/felixge/httpsnoop v1.0.3 go-module (+1 duplicate) -github.com/felixge/httpsnoop v1.0.4 go-module +github.com/felixge/httpsnoop v1.0.4 go-module (+1 duplicate) github.com/fernet/fernet-go v0.0.0-20240119011108-303da6aec611 go-module github.com/fluent/fluent-logger-golang v1.9.0 go-module github.com/fsnotify/fsnotify v1.6.0 go-module github.com/fsnotify/fsnotify v1.9.0 go-module +github.com/fvbommel/sortorder v1.0.1 go-module +github.com/fxamacker/cbor/v2 v2.7.0 go-module github.com/go-jose/go-jose/v3 v3.0.4 go-module -github.com/go-logr/logr v1.4.2 go-module (+2 duplicates) -github.com/go-logr/stdr v1.2.2 go-module (+2 duplicates) +github.com/go-logr/logr v1.4.2 go-module (+3 duplicates) +github.com/go-logr/stdr v1.2.2 go-module (+3 duplicates) +github.com/go-openapi/jsonpointer v0.21.0 go-module +github.com/go-openapi/jsonreference v0.20.2 go-module +github.com/go-openapi/swag v0.23.0 go-module +github.com/go-viper/mapstructure/v2 v2.4.0 go-module github.com/godbus/dbus/v5 v5.1.0 go-module (+5 duplicates) -github.com/gofrs/flock v0.12.1 go-module -github.com/gogo/protobuf v1.3.2 go-module (+5 duplicates) +github.com/gofrs/flock v0.12.1 go-module (+1 duplicate) +github.com/gogo/protobuf v1.3.2 go-module (+6 duplicates) github.com/golang-jwt/jwt/v5 v5.2.2 go-module github.com/golang/gddo v0.0.0-20190904175337-72a348e765d2 go-module github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da go-module -github.com/golang/protobuf v1.5.4 go-module (+5 duplicates) +github.com/golang/protobuf v1.5.4 go-module (+6 duplicates) github.com/google/btree v1.1.2 go-module github.com/google/certificate-transparency-go v1.1.4 go-module +github.com/google/gnostic-models v0.6.8 go-module github.com/google/go-cmp v0.6.0 go-module (+4 duplicates) -github.com/google/go-cmp v0.7.0 go-module -github.com/google/gofuzz v1.2.0 go-module +github.com/google/go-cmp v0.7.0 go-module (+1 duplicate) +github.com/google/go-dap v0.12.0 go-module +github.com/google/gofuzz v1.2.0 go-module (+1 duplicate) github.com/google/s2a-go v0.1.7 go-module -github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 go-module +github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 go-module (+1 duplicate) github.com/google/uuid v1.4.0 go-module (+1 duplicate) -github.com/google/uuid v1.6.0 go-module +github.com/google/uuid v1.6.0 go-module (+1 duplicate) github.com/googleapis/enterprise-certificate-proxy v0.3.2 go-module github.com/googleapis/gax-go/v2 v2.12.0 go-module github.com/gorilla/mux v1.8.1 go-module +github.com/gorilla/websocket v1.5.0 go-module github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 go-module github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 go-module (+1 duplicate) github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 go-module -github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 go-module -github.com/hashicorp/errwrap v1.1.0 go-module +github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 go-module (+1 duplicate) +github.com/hashicorp/errwrap v1.1.0 go-module (+1 duplicate) +github.com/hashicorp/go-cleanhttp v0.5.2 go-module +github.com/hashicorp/go-cty-funcs v0.0.0-20250818135842-6aab67130928 go-module github.com/hashicorp/go-immutable-radix v1.3.1 go-module github.com/hashicorp/go-immutable-radix/v2 v2.1.0 go-module github.com/hashicorp/go-memdb v1.3.2 go-module github.com/hashicorp/go-msgpack v0.5.5 go-module -github.com/hashicorp/go-multierror v1.1.1 go-module +github.com/hashicorp/go-multierror v1.1.1 go-module (+1 duplicate) github.com/hashicorp/go-sockaddr v1.0.2 go-module github.com/hashicorp/golang-lru v0.5.4 go-module github.com/hashicorp/golang-lru/v2 v2.0.7 go-module +github.com/hashicorp/hcl/v2 v2.24.0 go-module github.com/hashicorp/memberlist v0.4.0 go-module github.com/hashicorp/serf v0.8.5 go-module -github.com/in-toto/in-toto-golang v0.9.0 go-module +github.com/in-toto/in-toto-golang v0.9.0 go-module (+1 duplicate) github.com/intel/goresctrl v0.5.0 go-module (+1 duplicate) github.com/ishidawataru/sctp v0.0.0-20230406120618-7ff4192f6ff2 go-module (+1 duplicate) github.com/jmoiron/sqlx v1.3.3 go-module -github.com/json-iterator/go v1.1.12 go-module +github.com/josharian/intern v1.0.0 go-module +github.com/json-iterator/go v1.1.12 go-module (+1 duplicate) github.com/klauspost/compress v1.16.7 go-module (+3 duplicates) -github.com/klauspost/compress v1.18.0 go-module +github.com/klauspost/compress v1.18.0 go-module (+1 duplicate) github.com/klauspost/cpuid/v2 v2.0.4 go-module (+1 duplicate) +github.com/mailru/easyjson v0.7.7 go-module +github.com/mattn/go-runewidth v0.0.16 go-module +github.com/mattn/go-shellwords v1.0.12 go-module github.com/matttproud/golang_protobuf_extensions v1.0.4 go-module github.com/miekg/dns v1.1.66 go-module github.com/miekg/pkcs11 v1.1.1 go-module github.com/minio/sha256-simd v1.0.0 go-module (+1 duplicate) github.com/mistifyio/go-zfs/v3 v3.0.1 go-module (+1 duplicate) github.com/mitchellh/copystructure v1.2.0 go-module -github.com/mitchellh/hashstructure/v2 v2.0.2 go-module +github.com/mitchellh/go-wordwrap v1.0.1 go-module +github.com/mitchellh/hashstructure/v2 v2.0.2 go-module (+1 duplicate) github.com/mitchellh/reflectwalk v1.0.2 go-module +github.com/moby/buildkit v0.25.0 go-module github.com/moby/buildkit v0.25.1 go-module -github.com/moby/docker-image-spec v1.3.1 go-module -github.com/moby/go-archive v0.1.0 go-module +github.com/moby/docker-image-spec v1.3.1 go-module (+1 duplicate) +github.com/moby/go-archive v0.1.0 go-module (+1 duplicate) github.com/moby/ipvs v1.1.0 go-module -github.com/moby/locker v1.0.1 go-module (+2 duplicates) -github.com/moby/patternmatcher v0.6.0 go-module +github.com/moby/locker v1.0.1 go-module (+3 duplicates) +github.com/moby/patternmatcher v0.6.0 go-module (+1 duplicate) github.com/moby/profiles/apparmor v0.1.0 go-module github.com/moby/profiles/seccomp v0.1.0 go-module github.com/moby/pubsub v1.0.0 go-module github.com/moby/spdystream v0.2.0 go-module +github.com/moby/spdystream v0.5.0 go-module github.com/moby/swarmkit/v2 v2.0.0 go-module -github.com/moby/sys/atomicwriter v0.1.0 go-module +github.com/moby/sys/atomicwriter v0.1.0 go-module (+1 duplicate) github.com/moby/sys/capability v0.4.0 go-module github.com/moby/sys/mount v0.3.4 go-module github.com/moby/sys/mountinfo v0.6.2 go-module (+4 duplicates) -github.com/moby/sys/mountinfo v0.7.2 go-module (+1 duplicate) +github.com/moby/sys/mountinfo v0.7.2 go-module (+2 duplicates) github.com/moby/sys/reexec v0.1.0 go-module -github.com/moby/sys/sequential v0.6.0 go-module +github.com/moby/sys/sequential v0.6.0 go-module (+1 duplicate) github.com/moby/sys/signal v0.7.0 go-module (+1 duplicate) -github.com/moby/sys/signal v0.7.1 go-module +github.com/moby/sys/signal v0.7.1 go-module (+1 duplicate) github.com/moby/sys/symlink v0.2.0 go-module github.com/moby/sys/symlink v0.3.0 go-module github.com/moby/sys/user v0.3.0 go-module (+4 duplicates) -github.com/moby/sys/user v0.4.0 go-module -github.com/moby/sys/userns v0.1.0 go-module (+6 duplicates) -github.com/moby/term v0.5.2 go-module -github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd go-module -github.com/modern-go/reflect2 v1.0.2 go-module -github.com/morikuni/aec v1.0.0 go-module +github.com/moby/sys/user v0.4.0 go-module (+1 duplicate) +github.com/moby/sys/userns v0.1.0 go-module (+7 duplicates) +github.com/moby/term v0.5.2 go-module (+1 duplicate) +github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd go-module (+1 duplicate) +github.com/modern-go/reflect2 v1.0.2 go-module (+1 duplicate) +github.com/morikuni/aec v1.0.0 go-module (+1 duplicate) github.com/mrunalp/fileutils v0.5.1 go-module -github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 go-module +github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 go-module (+1 duplicate) +github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f go-module github.com/opencontainers/cgroups v0.0.1 go-module github.com/opencontainers/cgroups v0.0.3 go-module -github.com/opencontainers/go-digest v1.0.0 go-module (+5 duplicates) +github.com/opencontainers/go-digest v1.0.0 go-module (+6 duplicates) github.com/opencontainers/image-spec v1.1.0 go-module (+4 duplicates) -github.com/opencontainers/image-spec v1.1.1 go-module +github.com/opencontainers/image-spec v1.1.1 go-module (+1 duplicate) github.com/opencontainers/runc v1.3.0 go-module github.com/opencontainers/runtime-spec v1.1.0 go-module (+4 duplicates) github.com/opencontainers/runtime-spec v1.2.1 go-module (+1 duplicate) @@ -250,11 +281,12 @@ github.com/opencontainers/selinux v1 github.com/opencontainers/selinux v1.11.1 go-module github.com/opencontainers/selinux v1.12.0 go-module github.com/package-url/packageurl-go v0.1.1 go-module -github.com/pelletier/go-toml v1.9.5 go-module (+2 duplicates) +github.com/pelletier/go-toml v1.9.5 go-module (+3 duplicates) github.com/pelletier/go-toml/v2 v2.2.4 go-module github.com/philhofer/fwd v1.1.2 go-module -github.com/pkg/errors v0.9.1 go-module (+5 duplicates) -github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 go-module +github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c go-module +github.com/pkg/errors v0.9.1 go-module (+6 duplicates) +github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 go-module (+1 duplicate) github.com/pmezard/go-difflib v1.0.0 go-module github.com/prometheus/client_golang v1.16.0 go-module github.com/prometheus/client_golang v1.22.0 go-module @@ -264,14 +296,19 @@ github.com/prometheus/common v0 github.com/prometheus/common v0.62.0 go-module github.com/prometheus/procfs v0.10.1 go-module github.com/prometheus/procfs v0.15.1 go-module +github.com/rivo/uniseg v0.2.0 go-module github.com/rootless-containers/rootlesskit/v2 v2.3.4 go-module +github.com/santhosh-tekuri/jsonschema/v6 v6.0.1 go-module github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529 go-module github.com/seccomp/libseccomp-golang v0.10.0 go-module -github.com/secure-systems-lab/go-securesystemslib v0.6.0 go-module -github.com/shibumi/go-pathspec v1.3.0 go-module -github.com/sirupsen/logrus v1.9.3 go-module (+7 duplicates) +github.com/secure-systems-lab/go-securesystemslib v0.6.0 go-module (+1 duplicate) +github.com/serialx/hashring v0.0.0-20200727003509-22c0c7ab6b1b go-module +github.com/shibumi/go-pathspec v1.3.0 go-module (+1 duplicate) +github.com/sirupsen/logrus v1.9.3 go-module (+8 duplicates) github.com/spdx/tools-golang v0.5.5 go-module +github.com/spf13/cobra v1.10.1 go-module github.com/spf13/cobra v1.9.1 go-module +github.com/spf13/pflag v1.0.10 go-module github.com/spf13/pflag v1.0.5 go-module github.com/spf13/pflag v1.0.6 go-module github.com/stefanberger/go-pkcs11uri v0.0.0-20230803200340-78284954bff6 go-module @@ -279,12 +316,14 @@ github.com/stretchr/testify v1 github.com/syndtr/gocapability v0.0.0-20200815063812-42c35b437635 go-module (+1 duplicate) github.com/tchap/go-patricia/v2 v2.3.1 go-module github.com/tinylib/msgp v1.1.8 go-module -github.com/tonistiigi/dchapes-mode v0.0.0-20250318174251-73d941a28323 go-module -github.com/tonistiigi/fsutil v0.0.0-20250605211040-586307ad452f go-module +github.com/tonistiigi/dchapes-mode v0.0.0-20250318174251-73d941a28323 go-module (+1 duplicate) +github.com/tonistiigi/fsutil v0.0.0-20250605211040-586307ad452f go-module (+1 duplicate) github.com/tonistiigi/go-actions-cache v0.0.0-20250626083717-378c5ed1ddd9 go-module github.com/tonistiigi/go-archvariant v1.0.0 go-module -github.com/tonistiigi/go-csvvalue v0.0.0-20240814133006-030d3b2625d0 go-module -github.com/tonistiigi/units v0.0.0-20180711220420-6950e57a87ea go-module +github.com/tonistiigi/go-csvvalue v0.0.0-20240814133006-030d3b2625d0 go-module (+1 duplicate) +github.com/tonistiigi/jaeger-ui-rest v0.0.0-20250408171107-3dd17559e117 go-module +github.com/tonistiigi/units v0.0.0-20180711220420-6950e57a87ea go-module (+1 duplicate) +github.com/tonistiigi/vt100 v0.0.0-20240514184818-90bafcd6abab go-module github.com/urfave/cli v1.22.12 go-module (+1 duplicate) github.com/urfave/cli v1.22.16 go-module github.com/vbatts/tar-split v0.12.1 go-module @@ -295,6 +334,9 @@ github.com/vishvananda/netns v0 github.com/vishvananda/netns v0.0.4 go-module github.com/vishvananda/netns v0.0.5 go-module github.com/weppos/publicsuffix-go v0.15.1-0.20210511084619-b1f36a2d6c0b go-module +github.com/x448/float16 v0.8.4 go-module +github.com/xhit/go-str2duration/v2 v2.1.0 go-module +github.com/zclconf/go-cty v1.17.0 go-module github.com/zmap/zcrypto v0.0.0-20210511125630-18f1e0152cfc go-module github.com/zmap/zlint/v3 v3.1.0 go-module gnupg 2.4.4-2ubuntu17.3 deb @@ -308,69 +350,74 @@ go.etcd.io/etcd/raft/v3 v3 go.etcd.io/etcd/server/v3 v3.5.16 go-module go.mozilla.org/pkcs7 v0.0.0-20200128120323-432b2356ecb1 go-module go.opencensus.io v0.24.0 go-module -go.opentelemetry.io/auto/sdk v1.1.0 go-module +go.opentelemetry.io/auto/sdk v1.1.0 go-module (+1 duplicate) go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.46.1 go-module -go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 go-module -go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 go-module +go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 go-module (+1 duplicate) +go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 go-module (+1 duplicate) go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.45.0 go-module (+1 duplicate) -go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 go-module +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 go-module (+1 duplicate) go.opentelemetry.io/contrib/processors/baggagecopy v0.4.0 go-module go.opentelemetry.io/otel v1.21.0 go-module (+1 duplicate) -go.opentelemetry.io/otel v1.35.0 go-module -go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0 go-module -go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.35.0 go-module +go.opentelemetry.io/otel v1.35.0 go-module (+1 duplicate) +go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0 go-module (+1 duplicate) +go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.19.0 go-module -go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 go-module +go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.19.0 go-module -go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 go-module +go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.19.0 go-module -go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 go-module +go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/otel/metric v1.21.0 go-module (+1 duplicate) -go.opentelemetry.io/otel/metric v1.35.0 go-module +go.opentelemetry.io/otel/metric v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/otel/sdk v1.21.0 go-module -go.opentelemetry.io/otel/sdk v1.35.0 go-module -go.opentelemetry.io/otel/sdk/metric v1.35.0 go-module +go.opentelemetry.io/otel/sdk v1.35.0 go-module (+1 duplicate) +go.opentelemetry.io/otel/sdk/metric v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/otel/trace v1.21.0 go-module (+1 duplicate) -go.opentelemetry.io/otel/trace v1.35.0 go-module +go.opentelemetry.io/otel/trace v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/proto/otlp v1.0.0 go-module -go.opentelemetry.io/proto/otlp v1.5.0 go-module +go.opentelemetry.io/proto/otlp v1.5.0 go-module (+1 duplicate) go.uber.org/atomic v1.9.0 go-module go.uber.org/multierr v1.8.0 go-module go.uber.org/zap v1.21.0 go-module +go.yaml.in/yaml/v3 v3.0.4 go-module golang.org/x/crypto v0.37.0 go-module +golang.org/x/crypto v0.38.0 go-module golang.org/x/crypto v0.40.0 go-module golang.org/x/mod v0.24.0 go-module golang.org/x/mod v0.26.0 go-module golang.org/x/net v0.35.0 go-module -golang.org/x/net v0.39.0 go-module (+1 duplicate) +golang.org/x/net v0.39.0 go-module (+2 duplicates) golang.org/x/net v0.42.0 go-module (+2 duplicates) -golang.org/x/oauth2 v0.29.0 go-module +golang.org/x/oauth2 v0.29.0 go-module (+1 duplicate) golang.org/x/oauth2 v0.30.0 go-module -golang.org/x/sync v0.16.0 go-module (+5 duplicates) +golang.org/x/sync v0.16.0 go-module (+6 duplicates) golang.org/x/sys v0.30.0 go-module -golang.org/x/sys v0.33.0 go-module (+1 duplicate) +golang.org/x/sys v0.33.0 go-module (+2 duplicates) golang.org/x/sys v0.34.0 go-module (+4 duplicates) +golang.org/x/term v0.32.0 go-module golang.org/x/term v0.33.0 go-module golang.org/x/text v0.24.0 go-module +golang.org/x/text v0.25.0 go-module golang.org/x/text v0.27.0 go-module (+2 duplicates) -golang.org/x/time v0.11.0 go-module +golang.org/x/time v0.11.0 go-module (+1 duplicate) golang.org/x/time v0.12.0 go-module google-chrome-stable 141.0.7390.107-1 deb google.golang.org/api v0.160.0 go-module google.golang.org/genproto v0.0.0-20231211222908-989df2bf70f3 go-module (+4 duplicates) google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de go-module google.golang.org/genproto/googleapis/api v0.0.0-20231120223509-83a465c0220f go-module -google.golang.org/genproto/googleapis/api v0.0.0-20250218202821-56aae31c358a go-module +google.golang.org/genproto/googleapis/api v0.0.0-20250218202821-56aae31c358a go-module (+1 duplicate) google.golang.org/genproto/googleapis/rpc v0.0.0-20240401170217-c3f982113cda go-module (+4 duplicates) -google.golang.org/genproto/googleapis/rpc v0.0.0-20250218202821-56aae31c358a go-module +google.golang.org/genproto/googleapis/rpc v0.0.0-20250218202821-56aae31c358a go-module (+1 duplicate) google.golang.org/grpc v1.59.0 go-module (+4 duplicates) -google.golang.org/grpc v1.72.2 go-module +google.golang.org/grpc v1.72.2 go-module (+1 duplicate) google.golang.org/protobuf v1.35.2 go-module (+4 duplicates) google.golang.org/protobuf v1.36.5 go-module -google.golang.org/protobuf v1.36.9 go-module -gopkg.in/inf.v0 v0.9.1 go-module (+1 duplicate) +google.golang.org/protobuf v1.36.9 go-module (+1 duplicate) +gopkg.in/evanphx/json-patch.v4 v4.12.0 go-module +gopkg.in/inf.v0 v0.9.1 go-module (+2 duplicates) gopkg.in/yaml.v2 v2.4.0 go-module (+1 duplicate) -gopkg.in/yaml.v3 v3.0.1 go-module (+1 duplicate) +gopkg.in/yaml.v3 v3.0.1 go-module (+2 duplicates) gpg 2.4.4-2ubuntu17.3 deb gpg-agent 2.4.4-2ubuntu17.3 deb gpg-wks-client 2.4.4-2ubuntu17.3 deb @@ -391,14 +438,19 @@ jinja2 3. jmespath 1.0.1 python jq 1.7.1-3ubuntu0.24.04.1 deb k8s.io/api v0.26.2 go-module +k8s.io/api v0.32.3 go-module k8s.io/apimachinery v0.27.4 go-module (+1 duplicate) +k8s.io/apimachinery v0.32.3 go-module k8s.io/apiserver v0.26.2 go-module k8s.io/client-go v0.26.2 go-module +k8s.io/client-go v0.32.3 go-module k8s.io/component-base v0.26.2 go-module k8s.io/cri-api v0.27.1 go-module -k8s.io/klog/v2 v2.130.1 go-module +k8s.io/klog/v2 v2.130.1 go-module (+1 duplicate) k8s.io/klog/v2 v2.90.1 go-module +k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f go-module k8s.io/utils v0.0.0-20230220204549-a5ecb0141aa5 go-module +k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 go-module keyboxd 2.4.4-2ubuntu17.3 deb krb5-locales 1.20.1-6ubuntu2.6 deb libacl1 2.3.2-1build1.1 deb @@ -653,12 +705,15 @@ selenium-manager UN sensible-utils 0.0.22 deb shared-mime-info 2.4-4 deb sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd go-module +sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 go-module sigs.k8s.io/structured-merge-diff/v4 v4.2.3 go-module +sigs.k8s.io/structured-merge-diff/v4 v4.4.2 go-module sigs.k8s.io/yaml v1.3.0 go-module (+1 duplicate) -sigs.k8s.io/yaml v1.4.0 go-module +sigs.k8s.io/yaml v1.4.0 go-module (+1 duplicate) six 1.17.0 python sniffio 1.3.1 python sortedcontainers 2.4.0 python +stdlib go1.24.7 go-module stdlib go1.24.8 go-module (+8 duplicates) systemd 255.4-1ubuntu8.11 deb systemd-dev 255.4-1ubuntu8.11 deb From 68ae853caf3885b265b9649a976fd4658cec0a31 Mon Sep 17 00:00:00 2001 From: LinuxServer-CI Date: Sun, 26 Oct 2025 03:51:59 +0000 Subject: [PATCH 10/12] Bot Updating Package Versions --- package_versions.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package_versions.txt b/package_versions.txt index efd1757..85ca0d8 100755 --- a/package_versions.txt +++ b/package_versions.txt @@ -401,7 +401,7 @@ golang.org/x/text v0 golang.org/x/text v0.27.0 go-module (+2 duplicates) golang.org/x/time v0.11.0 go-module (+1 duplicate) golang.org/x/time v0.12.0 go-module -google-chrome-stable 141.0.7390.107-1 deb +google-chrome-stable 141.0.7390.122-1 deb google.golang.org/api v0.160.0 go-module google.golang.org/genproto v0.0.0-20231211222908-989df2bf70f3 go-module (+4 duplicates) google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de go-module @@ -681,7 +681,7 @@ packaging 25 passwd 1:4.13+dfsg1-4ubuntu3.2 deb perl-base 5.38.2-3.2ubuntu0.2 deb pinentry-curses 1.2.1-3ubuntu5 deb -pip 25.2 python +pip 25.3 python procps 2:4.0.4-4ubuntu3.2 deb publicsuffix 20231001.0357-0.1 deb pysocks 1.7.1 python From 980f19ab0aca2c116b0971f85b627c7974aa7ac6 Mon Sep 17 00:00:00 2001 From: LinuxServer-CI Date: Sun, 2 Nov 2025 03:57:04 +0000 Subject: [PATCH 11/12] Bot Updating Package Versions --- package_versions.txt | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/package_versions.txt b/package_versions.txt index 85ca0d8..0bff424 100755 --- a/package_versions.txt +++ b/package_versions.txt @@ -401,7 +401,7 @@ golang.org/x/text v0 golang.org/x/text v0.27.0 go-module (+2 duplicates) golang.org/x/time v0.11.0 go-module (+1 duplicate) golang.org/x/time v0.12.0 go-module -google-chrome-stable 141.0.7390.122-1 deb +google-chrome-stable 142.0.7444.59-1 deb google.golang.org/api v0.160.0 go-module google.golang.org/genproto v0.0.0-20231211222908-989df2bf70f3 go-module (+4 duplicates) google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de go-module @@ -651,7 +651,7 @@ libxi6 2: libxinerama1 2:1.1.4-3build1 deb libxkbcommon0 1.6.0-1build1 deb libxkbfile1 1:1.1.0-1build4 deb -libxml2 2.9.14+dfsg-1.3ubuntu3.5 deb +libxml2 2.9.14+dfsg-1.3ubuntu3.6 deb libxmu6 2:1.1.3-3build2 deb libxmuu1 2:1.1.3-3build2 deb libxpm4 1:3.5.17-1build2 deb @@ -724,7 +724,7 @@ tags.cncf.io/container-device-interface v1 tags.cncf.io/container-device-interface/specs-go v0.8.0 go-module tags.cncf.io/container-device-interface/specs-go v1.0.0 go-module tar 1.35+dfsg-3build1 deb -trio 0.31.0 python +trio 0.32.0 python trio-websocket 0.12.2 python tzdata 2025b-0ubuntu0.24.04.1 deb ubuntu-keyring 2023.11.28.1 deb @@ -741,7 +741,7 @@ x11-xkb-utils 7. xauth 1:1.1.2-1build1 deb xdg-utils 1.1.3-4.1ubuntu3 deb xkb-data 2.41-2ubuntu1.1 deb -xserver-common 2:21.1.12-1ubuntu1.4 deb -xserver-xephyr 2:21.1.12-1ubuntu1.4 deb -xvfb 2:21.1.12-1ubuntu1.4 deb +xserver-common 2:21.1.12-1ubuntu1.5 deb +xserver-xephyr 2:21.1.12-1ubuntu1.5 deb +xvfb 2:21.1.12-1ubuntu1.5 deb zlib1g 1:1.3.dfsg-3.1ubuntu2.1 deb From ff8d7c44d489a0c7ae1025c72efa614c6b71f44c Mon Sep 17 00:00:00 2001 From: LinuxServer-CI Date: Sun, 9 Nov 2025 03:55:08 +0000 Subject: [PATCH 12/12] Bot Updating Package Versions --- package_versions.txt | 34 +++++++++++++++++++--------------- 1 file changed, 19 insertions(+), 15 deletions(-) diff --git a/package_versions.txt b/package_versions.txt index 0bff424..0039f0a 100755 --- a/package_versions.txt +++ b/package_versions.txt @@ -1,4 +1,5 @@ NAME VERSION TYPE +./internal/third_party/selinux UNKNOWN go-module Simple Launcher 1.1.0.14 binary (+5 duplicates) adduser 3.137ubuntu1 deb adwaita-icon-theme 46.0-1 deb @@ -22,7 +23,7 @@ cloud.google.com/go/compute/metadata v0 cloud.google.com/go/logging v1.9.0 go-module cloud.google.com/go/longrunning v0.5.5 go-module code.cloudfoundry.org/clock v1.37.0 go-module -containerd.io 1.7.28-1~ubuntu.24.04~noble deb +containerd.io 1.7.29-1~ubuntu.24.04~noble deb coreutils 9.4-3ubuntu6.1 deb cron 3.0pl1-184ubuntu2 deb cron-daemon-common 3.0pl1-184ubuntu2 deb @@ -44,8 +45,8 @@ diffutils 1: dirmngr 2.4.4-2ubuntu17.3 deb docker 6.0.1 python docker-buildx-plugin 0.29.1-1~ubuntu.24.04~noble deb -docker-ce 5:28.5.1-1~ubuntu.24.04~noble deb -docker-ce-cli 5:28.5.1-1~ubuntu.24.04~noble deb +docker-ce 5:28.5.2-1~ubuntu.24.04~noble deb +docker-ce-cli 5:28.5.2-1~ubuntu.24.04~noble deb dpkg 1.22.6ubuntu6.5 deb e2fsprogs 1.47.0-2.4~exp1ubuntu4.1 deb findutils 4.9.0-5build1 deb @@ -102,9 +103,8 @@ github.com/containerd/cgroups v1 github.com/containerd/cgroups/v3 v3.0.2 go-module (+3 duplicates) github.com/containerd/cgroups/v3 v3.0.5 go-module github.com/containerd/console v1.0.3 go-module (+4 duplicates) -github.com/containerd/console v1.0.4 go-module -github.com/containerd/console v1.0.5 go-module (+1 duplicate) -github.com/containerd/containerd v1.7.28 go-module (+4 duplicates) +github.com/containerd/console v1.0.5 go-module (+2 duplicates) +github.com/containerd/containerd v1.7.29 go-module (+4 duplicates) github.com/containerd/containerd/api v1.8.0 go-module (+4 duplicates) github.com/containerd/containerd/api v1.9.0 go-module (+1 duplicate) github.com/containerd/containerd/v2 v2.1.4 go-module (+1 duplicate) @@ -136,7 +136,8 @@ github.com/containernetworking/plugins v1 github.com/containernetworking/plugins v1.7.1 go-module github.com/containers/ocicrypt v1.1.10 go-module github.com/coreos/go-systemd/v22 v22.5.0 go-module (+5 duplicates) -github.com/cyphar/filepath-securejoin v0.4.1 go-module (+1 duplicate) +github.com/cyphar/filepath-securejoin v0.4.1 go-module +github.com/cyphar/filepath-securejoin v0.5.1 go-module github.com/davecgh/go-spew v1.1.1 go-module (+2 duplicates) github.com/deckarep/golang-set/v2 v2.3.0 go-module github.com/dimchansky/utfbom v1.1.1 go-module @@ -147,7 +148,7 @@ github.com/docker/cli-docs-tool v0 github.com/docker/cli/cmd/docker UNKNOWN go-module github.com/docker/distribution v2.8.3+incompatible go-module github.com/docker/docker v28.4.0+incompatible go-module -github.com/docker/docker v28.5.1 go-module (+1 duplicate) +github.com/docker/docker v28.5.2 go-module (+1 duplicate) github.com/docker/docker-credential-helpers v0.9.3 go-module github.com/docker/go-connections v0.5.0 go-module (+1 duplicate) github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c go-module (+3 duplicates) @@ -235,7 +236,7 @@ github.com/mitchellh/go-wordwrap v1 github.com/mitchellh/hashstructure/v2 v2.0.2 go-module (+1 duplicate) github.com/mitchellh/reflectwalk v1.0.2 go-module github.com/moby/buildkit v0.25.0 go-module -github.com/moby/buildkit v0.25.1 go-module +github.com/moby/buildkit v0.25.2 go-module github.com/moby/docker-image-spec v1.3.1 go-module (+1 duplicate) github.com/moby/go-archive v0.1.0 go-module (+1 duplicate) github.com/moby/ipvs v1.1.0 go-module @@ -268,17 +269,16 @@ github.com/morikuni/aec v1 github.com/mrunalp/fileutils v0.5.1 go-module github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 go-module (+1 duplicate) github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f go-module -github.com/opencontainers/cgroups v0.0.1 go-module github.com/opencontainers/cgroups v0.0.3 go-module +github.com/opencontainers/cgroups v0.0.4 go-module github.com/opencontainers/go-digest v1.0.0 go-module (+6 duplicates) github.com/opencontainers/image-spec v1.1.0 go-module (+4 duplicates) github.com/opencontainers/image-spec v1.1.1 go-module (+1 duplicate) -github.com/opencontainers/runc v1.3.0 go-module +github.com/opencontainers/runc v1.3.3 go-module github.com/opencontainers/runtime-spec v1.1.0 go-module (+4 duplicates) github.com/opencontainers/runtime-spec v1.2.1 go-module (+1 duplicate) github.com/opencontainers/runtime-tools v0.9.1-0.20221107090550-2e043c6bd626 go-module (+1 duplicate) github.com/opencontainers/selinux v1.11.0 go-module (+1 duplicate) -github.com/opencontainers/selinux v1.11.1 go-module github.com/opencontainers/selinux v1.12.0 go-module github.com/package-url/packageurl-go v0.1.1 go-module github.com/pelletier/go-toml v1.9.5 go-module (+3 duplicates) @@ -401,7 +401,7 @@ golang.org/x/text v0 golang.org/x/text v0.27.0 go-module (+2 duplicates) golang.org/x/time v0.11.0 go-module (+1 duplicate) golang.org/x/time v0.12.0 go-module -google-chrome-stable 142.0.7444.59-1 deb +google-chrome-stable 142.0.7444.134-1 deb google.golang.org/api v0.160.0 go-module google.golang.org/genproto v0.0.0-20231211222908-989df2bf70f3 go-module (+4 duplicates) google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de go-module @@ -532,6 +532,7 @@ libicu74 74 libidn2-0 2.3.7-2build1.1 deb libip4tc2 1.8.10-3ubuntu2 deb libip6tc2 1.8.10-3ubuntu2 deb +libjansson4 2.14-2build2 deb libjbig0 2.1-6.1ubuntu2 deb libjpeg-turbo8 2.1.5-2ubuntu2 deb libjpeg8 8c-2ubuntu11 deb @@ -557,6 +558,7 @@ libncursesw6 6. libnetfilter-conntrack3 1.0.9-6build1 deb libnettle8t64 3.9.1-2.2build1.1 deb libnfnetlink0 1.0.2-2build1 deb +libnftables1 1.0.9-1build1 deb libnftnl11 1.2.6-2build1 deb libnghttp2-14 1.59.0-1ubuntu0.2 deb libnpth0t64 1.6-3.1build1 deb @@ -598,7 +600,7 @@ libsm6 2: libsmartcols1 2.39.3-9ubuntu6.3 deb libsqlite3-0 3.45.1-1ubuntu2.5 deb libss2 1.47.0-2.4~exp1ubuntu4.1 deb -libssh-4 0.10.6-2ubuntu0.1 deb +libssh-4 0.10.6-2ubuntu0.2 deb libssl3t64 3.0.13-0ubuntu3.6 deb libstdc++6 14.2.0-4ubuntu2~24.04 deb libsystemd-shared 255.4-1ubuntu8.11 deb @@ -675,6 +677,7 @@ ncurses-base 6. ncurses-bin 6.4+20240113-1ubuntu2 deb netbase 6.4 deb netcat-openbsd 1.226-1ubuntu2 deb +nftables 1.0.9-1build1 deb openssl 3.0.13-0ubuntu3.6 deb outcome 1.3.0.post0 python packaging 25.0 python @@ -714,7 +717,8 @@ six 1. sniffio 1.3.1 python sortedcontainers 2.4.0 python stdlib go1.24.7 go-module -stdlib go1.24.8 go-module (+8 duplicates) +stdlib go1.24.9 go-module (+5 duplicates) +stdlib go1.25.3 go-module (+2 duplicates) systemd 255.4-1ubuntu8.11 deb systemd-dev 255.4-1ubuntu8.11 deb systemd-sysv 255.4-1ubuntu8.11 deb