When trying to validate an SPDX file from the ubuntu:latest image the resulting file does not validate due to error:
Analysis exception processing SPDX file: Invalid license expression. Expecting more operands.
License expression: 'LGPL-2.1+, GPL-2.0+, LGPL-2.0+'
This is because the license expression should use AND instead of commas: LGPL-2.1+ AND GPL-2.0+ AND LGPL-2.0+
PackageName: libprocps8
SPDXID: SPDXRef-libprocps8-2-3.3.17-6ubuntu2
PackageVersion: 2:3.3.17-6ubuntu2
PackageSupplier: Organization: Ubuntu
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: LGPL-2.1+, GPL-2.0+, LGPL-2.0+
PackageCopyrightText:<text>
When trying to validate an SPDX file from the
ubuntu:latestimage the resulting file does not validate due to error:This is because the license expression should use
ANDinstead of commas:LGPL-2.1+ AND GPL-2.0+ AND LGPL-2.0+