THIRD-PARTY SOFTWARE - ATTRIBUTION REPORT - SYS-ROOTFS-IMAGE 20240101120000

avahi - version 0.7

base-files - version 3.0.14

bash - version 5.0

busybox - version 1.31.1

bzip2 - version 1.0.8

c-ares - version 1.18.1

canutils - version 4.0.6

curl - version 7.69.1

dbus - version 1.12.24

e2fsprogs - version 1.45.7

elfutils - version 0.178

expat - version 2.2.9

gcc-runtime - version 9.5.0

glibc - version 2.31+gitAUTOINC+2d4f26e5cf

gmp - version 6.2.0

gnutls - version 3.6.14

hostapd - version 2.10

iperf3 - version 3.7

iproute2 - version 5.5.0

iptables - version 1.8.4

iw - version 5.4

json-c - version 0.13.1

kmod - version 26

less - version 551

libcap - version 2.32

libdaemon - version 0.14

libestr - version 0.1.11

libfastjson - version 0.99.8

libgcc - version 9.5.0

libgcrypt - version 1.8.7

libgpg-error - version 1.37

libidn2 - version 2.3.0

libmnl - version 1.0.4

libnl - version 3.5.0

libnss-mdns - version 0.14.1

libsocketcan - version 0.0.11

libunistring - version 0.9.10

libxcrypt - version 4.4.15

libzip - version 1.6.1

linux-ti-staging - version 5.4.106+gitAUTOINC+023faefa70

logrotate - version 3.15.1

mmc-utils - version 0.1+gitAUTOINC+73d6c59af8

ncurses - version 6.2

netbase - version 6.1

nettle - version 3.5.1

openssl - version 1.1.1g

opkg-utils - version 0.4.2

os-release - version 1.0

p7zip - version 16.02

parted - version 3.3

perl - version 5.30.1

popt - version 1.16

qflash - version 2.0

quectelcm - version 1.0

readline - version 8.0

rsyslog - version 8.2002.0

run-postinsts - version 1.0

shadow - version 4.8.1

shadow-securetty - version 4.6

sqlite3 - version 3.31.1

sudo - version 1.9.5p2

systemd - version 244.5

systemd-conf - version 244.3

tree - version 1.8.0

u-boot-ti-staging - version 2020.01+gitAUTOINC+ae8ceb7b6e

util-linux - version 2.35.1

volatile-binds - version 1.0

watchdog - version 5.15

watchdog-config - version 1.0

wireless-regdb - version 2023.05.03

wl18xx-calibrator - version 8.8.0

wl18xx-fw - version 8.8.0

wpa-supplicant - version 2.9

xdelta3 - version 3.1.0

xz - version 5.2.4

zlib - version 1.2.11

WARNING: The SBoM may be inaccurate. See SBoM Parsing Issues for details.


avahi

Avahi IPv4LL network address configuration daemon

License: GNU General Public License v2.0 or later AND GNU Lesser General Public License v2.1 or later.

LICENSE:

address.h:

client.h:

dns.h:

generic_GPLv2:

generic_LGPLv2.1:

main.c:

base-files

Miscellaneous files for the base system

License: GNU General Public License v2.0 only.

GPL-2:

generic_GPLv2:

bash

An sh-compatible command language interpreter

License: GNU General Public License v3.0 or later.

COPYING:

generic_GPLv3:

busybox

Tiny versions of many common UNIX utilities in a single small executable

License: .

LICENSE.0:

LICENSE.1:

generic_GPLv2:

generic_bzip2-1.0.4:

bzip2

Very high-quality data compression program

License: bzip2 and libbzip2 License v1.0.6.

LICENSE:

generic_bzip2-1.0.6:

c-ares

c-ares is a C library that resolves names asynchronously.

License: MIT License.

LICENSE.md:

generic_MIT:

canutils

canutils (PTX flavour)

License: GNU General Public License v2.0 only.

COPYING:

generic_GPLv2:

curl

Command line tool and library for client-side URL transfers

License: MIT License.

COPYING:

generic_MIT:

dbus

D-Bus message bus

License: .

COPYING:

dbus.h:

generic_AFL-2.1:

generic_GPLv2:

e2fsprogs

Ext2 Filesystem Utilities

License: BSD 3-Clause "New" or "Revised" License AND GNU General Public License v2.0 only AND GNU Library General Public License v2 only AND MIT License.

COPYING:

NOTICE:

e2p.h:

et_name.c:

ext2fs.h:

generic_BSD-3-Clause:

generic_GPLv2:

generic_LGPLv2:

generic_MIT:

ss.h:

uuid.h.in:

elfutils

Utilities and libraries for handling compiled object files

License: GNU General Public License v2.0 only AND GNU General Public License v3.0 or later AND GNU Lesser General Public License v3.0 or later.

COPYING:

generic_GPLv2:

generic_GPLv3:

generic_LGPLv3:

expat

A stream-oriented XML parser library

License: MIT License.

COPYING:

generic_MIT:

gcc-runtime

Runtime libraries from GCC

License: GNU General Public License v3.0 only, with GCC Runtime Library exception 3.1.

COPYING:

COPYING.LIB:

COPYING.RUNTIME:

COPYING3:

COPYING3.LIB:

generic_GPL-3.0-with-GCC-exception:

glibc

GLIBC (GNU C Library)

License: GNU General Public License v2.0 only AND GNU Lesser General Public License v2.1 only.

COPYING:

COPYING.LIB:

COPYRIGHT:

LICENSES:

generic_GPLv2:

generic_LGPLv2.1:

gmp

GNU multiprecision arithmetic library

License: GNU General Public License v2.0 or later OR GNU Lesser General Public License v3.0 or later.

COPYING:

COPYING.LESSERv3:

COPYINGv2:

generic_GPLv2:

generic_LGPLv3:

gnutls

GNU Transport Layer Security Library

License: GNU General Public License v3.0 or later AND GNU Lesser General Public License v2.1 or later.

COPYING:

COPYING.LESSER:

LICENSE:

generic_GPLv3:

generic_LGPLv2.1:

hostapd

User space daemon for extended IEEE 802.11 management

License: BSD 3-Clause "New" or "Revised" License.

README:

generic_BSD-3-Clause:

iperf3

Network benchmark tool

License: BSD 3-Clause "New" or "Revised" License.

LICENSE:

generic_BSD-3-Clause:

iproute2

TCP / IP networking and traffic control utilities

License: GNU General Public License v2.0 or later.

COPYING:

generic_GPLv2:

ip.c:

iptables

Tools for managing kernel packet filtering capabilities

License: GNU General Public License v2.0 or later.

COPYING:

generic_GPLv2:

iptables.c:

iw

nl80211 based CLI configuration utility for wireless devices

License: BSD 2-Clause "Simplified" License.

COPYING:

generic_BSD-2-Clause:

json-c

C bindings for apps which will manipulate JSON data

License: MIT License.

COPYING:

generic_MIT:

kmod

Tools for managing Linux kernel modules

License: GNU General Public License v2.0 or later AND GNU Lesser General Public License v2.1 or later.

COPYING:

generic_GPL-2.0:

generic_LGPL-2.1:

less

Text file viewer similar to more

License: BSD 2-Clause "Simplified" License OR GNU General Public License v3.0 or later.

COPYING:

LICENSE:

generic_BSD-2-Clause:

generic_GPLv3:

libcap

Library for getting/setting POSIX.1e capabilities

License: BSD 3-Clause "New" or "Revised" License OR GNU General Public License v2.0 only.

License:

generic_BSD-3-Clause:

generic_GPLv2:

libdaemon

Lightweight C library which eases the writing of UNIX daemons

License: GNU Lesser General Public License v2.1 or later.

LICENSE:

daemon.h:

generic_LGPLv2.1:

libestr

some essentials for string handling (and a bit more)

License: GNU Lesser General Public License v2.1 only.

COPYING:

generic_LGPLv2.1:

libfastjson

A fork of json-c library

License: MIT License.

COPYING:

generic_MIT:

libgcc

GNU cc and gcc C compilers

License: GNU General Public License v3.0 only, with GCC Runtime Library exception 3.1.

COPYING:

COPYING.LIB:

COPYING.RUNTIME:

COPYING3:

COPYING3.LIB:

generic_GPL-3.0-with-GCC-exception:

generic_GPLv3:

libgcrypt

General purpose cryptographic library based on the code from GnuPG

License: GNU General Public License v2.0 or later AND GNU General Public License v3.0 or later AND GNU Lesser General Public License v2.1 or later.

COPYING:

COPYING.LIB:

LICENSES:

generic_GPLv2:

generic_GPLv3:

generic_LGPLv2.1:

libgpg-error

Small library that defines common error values for all GnuPG components

License: GNU General Public License v2.0 or later AND GNU Lesser General Public License v2.1 or later.

COPYING:

COPYING.LIB:

generic_GPLv2:

generic_LGPLv2.1:

gpg-error.h.in:

init.c:

libidn2

Internationalized Domain Name support library

License: GNU General Public License v3.0 or later AND (GNU General Public License v2.0 or later OR GNU Lesser General Public License v3.0 only).

COPYING:

COPYING.LESSERv3:

COPYINGv2:

generic_GPLv2:

generic_GPLv3:

generic_LGPLv3:

idn2.c:

idn2.h.in:

libmnl

Minimalistic user-space Netlink utility library

License: GNU Lesser General Public License v2.1 or later.

COPYING:

generic_LGPLv2.1:

libnl

A library for applications dealing with netlink sockets

License: GNU Lesser General Public License v2.1 only.

COPYING:

generic_LGPLv2.1:

libnss-mdns

Name Service Switch module for Multicast DNS (zeroconf) name resolution

License: GNU Lesser General Public License v2.1 or later.

LICENSE:

generic_LGPLv2.1:

libsocketcan

Control basic functions in socketcan from userspace

License: GNU Lesser General Public License v2.1 only.

generic_LGPLv2.1:

libsocketcan.c:

libunistring

Library for manipulating C and Unicode strings

License: GNU General Public License v2.0 only OR GNU Lesser General Public License v3.0 or later.

COPYING.LIB:

README:

generic_GPLv2:

generic_LGPLv3:

libunistring.texi:

libxcrypt

Extended cryptographic library (from glibc)

License: GNU Lesser General Public License v2.1 only.

COPYING.LIB:

LICENSING:

generic_LGPLv2.1:

libzip

libzip version 1.6.1-r0.gdl60

License: BSD 3-Clause "New" or "Revised" License.

LICENSE:

generic_BSD-3-Clause:

linux-ti-staging

Linux kernel for TI devices

License: GNU General Public License v2.0 only.

COPYING:

generic_GPLv2:

logrotate

Rotates, compresses, removes and mails system log files

License: GNU General Public License v2.0 only.

COPYING:

generic_GPLv2:

mmc-utils

Userspace tools for MMC/SD devices

License: GNU General Public License v2.0 only.

generic_GPLv2:

mmc.c:

ncurses

The New Curses library

License: MIT License.

generic_MIT:

version.c:

netbase

Basic TCP/IP networking support

License: GNU General Public License v2.0 only.

copyright:

generic_GPLv2:

nettle

A low level cryptographic library

License: GNU General Public License v2.0 or later OR GNU Lesser General Public License v3.0 or later.

COPYING.LESSERv3:

COPYINGv2:

generic_GPLv2:

generic_LGPLv3:

serpent-decrypt.c:

serpent-set-key.c:

openssl

Secure Socket Layer

License: OpenSSL License.

LICENSE:

generic_openssl:

opkg-utils

Additional utilities for the opkg package manager

License: GNU General Public License v2.0 or later.

COPYING:

generic_GPLv2:

opkg.py:

os-release

Operating system identification

License: MIT License.

generic_MIT:

p7zip

7-zip is a commandline utility handling 7z archives.

License: GNU Lesser General Public License v2.1 or later AND unRAR License.

License.txt:

copying.txt:

generic_LGPL-2.1:

generic_unRAR:

unRarLicense.txt:

parted

Disk partition editing/resizing utility

License: GNU General Public License v3.0 or later.

COPYING:

generic_GPLv3:

perl

Perl scripting language

License: Artistic License 1.0 OR GNU General Public License v1.0 or later.

Artistic:

Copying:

generic_Artistic-1.0:

generic_GPL-1.0:

popt

Library for parsing command line options

License: MIT License.

COPYING:

generic_MIT:

qflash

Quectel QFlash utility to update modem firmware

License: .

quectelcm

Quectel Connection Manager

License: .

readline

Library for editing typed command lines

License: GNU General Public License v3.0 or later.

COPYING:

generic_GPLv3:

rsyslog

Rsyslog is an enhanced multi-threaded syslogd

License: Apache License 2.0 AND GNU General Public License v3.0 only AND GNU Lesser General Public License v3.0 only.

COPYING:

COPYING.ASL20:

COPYING.LESSER:

generic_Apache-2.0:

generic_GPLv3:

generic_LGPLv3:

run-postinsts

Runs postinstall scripts on first boot of the target device

License: MIT License.

COPYING.MIT:

generic_MIT:

shadow

Tools to change and administer password and group data

License: Artistic License 1.0 OR BSD 3-Clause "New" or "Revised" License.

COPYING:

generic_Artistic-1.0:

generic_BSD-3-Clause:

passwd.c:

shadow-securetty

Provider of the machine specific securetty file

License: MIT License.

COPYING.MIT:

generic_MIT:

sqlite3

Embeddable SQL database engine

License: Public Domain.

generic_PD:

sqlite3.h:

sudo

Provide limited super user privileges to specific users

License: BSD 3-Clause "New" or "Revised" License AND ISC License AND Zlib License.

LICENSE:

arc4random.c:

arc4random_uniform.c:

fnmatch.c:

generic_BSD:

generic_ISC:

generic_Zlib:

getcwd.c:

getentropy.c:

glob.c:

inet_pton.c:

reallocarray.c:

redblack.c:

snprintf.c:

sudo_queue.h:

systemd

A System and service manager

License: GNU General Public License v2.0 only AND GNU Lesser General Public License v2.1 only.

LICENSE.GPL2:

LICENSE.LGPL2.1:

generic_GPLv2:

generic_LGPLv2.1:

systemd-conf

Systemd system configuration

License: MIT License.

COPYING.MIT:

generic_MIT:

tree

A recursive directory listing command

License: GNU General Public License v2.0 only.

LICENSE:

generic_GPLv2:

u-boot-ti-staging

u-boot bootloader for TI devices

License: GNU General Public License v2.0 or later.

README:

generic_GPLv2:

util-linux

A suite of basic system administration utilities

License: .

COPYING.0:

COPYING.1:

COPYING.2:

COPYING.3:

COPYING.BSD-3-Clause:

COPYING.BSD-4-Clause-UC:

COPYING.GPL-2.0-or-later:

COPYING.LGPL-2.1-or-later:

README.licensing:

generic_BSD-3-Clause:

generic_BSD-4-Clause:

generic_GPLv2:

generic_LGPLv2.1:

volatile-binds

Volatile bind mount setup and configuration for read-only-rootfs

License: MIT License.

COPYING.MIT:

generic_MIT:

watchdog

Software watchdog

License: GNU General Public License v2.0 or later.

COPYING:

generic_GPL-2.0:

watchdog-config

Software watchdog

License: MIT License.

COPYING.MIT:

generic_MIT-X:

wireless-regdb

Wireless Central Regulatory Domain Database

License: ISC License.

LICENSE:

generic_ISC:

wl18xx-calibrator

wl18xx-calibrator version 8.8.0-r0.gdl60

License: BSD 3-Clause "New" or "Revised" License.

COPYING:

generic_BSD:

wl18xx-fw

wl18xx-fw version 8.8.0-r0.gdl60

License: TI Technology and Software Publicly Available Software License Agreement.

LICENCE:

generic_TI-TSPA:

wpa-supplicant

Client for Wi-Fi Protected Access (WPA)

License: BSD 3-Clause "New" or "Revised" License.

COPYING:

README:

generic_BSD-3-Clause:

wpa_supplicant.c:

xdelta3

Xdelta is a tool for differential compression

License: GNU General Public License v2.0 only.

COPYING:

generic_GPLv2:

xz

Utilities for managing LZMA compressed files

License: GNU General Public License v2.0 or later AND GNU General Public License v3.0 only, with Autoconf exception 3.0 AND GNU Lesser General Public License v2.1 or later AND Public Domain.

COPYING:

COPYING.GPLv2:

COPYING.GPLv3:

COPYING.LGPLv2.1:

generic_GPL-3.0-with-autoconf-exception:

generic_GPLv2:

generic_LGPLv2.1:

generic_PD:

getopt.c:

zlib

Zlib Compression Library

License: Zlib License.

generic_Zlib:

zlib.h:


SBoM Parsing Issues

The following issues were found while parsing the SBoM or .ABOUT files. These may affect the completeness or accuracy of the report.