Graphene also includes the following third party sources (and licenses):
mbedtls - Apache 2.0
wolfssl - GPL v2

RSA's MD5 algorithm (LibOS/shim/src/utils/md5.c) - RSA custom attribution license

Linux kernel - GPL v2
 - dcache implementation
 - linked list implementation
 - atomic_add, cmpxchg and friends implementation

Internet Software Consortium (permissive license): Pal/lib/network/inet_pton.c

MIT JOS (mix of MIT and BSD licenses:
* Pal/lib/stdlib/printfmt.c

A number of files taken from other C libraries:
* glibc - LGPL
* musl - MIT

[incomplete: more to come]