{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"alsa-tools-firmware-0.1.2.5-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/alsa-tools-firmware-0.1.2.5-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-alsa-firmware-1.2.4-d49e9cd2-4e14-4be5-8c9d-82f696cf82e8-a7409f75-ac03-4330-a7c4-bebfdd6e590b",
			"name":"alsa-firmware",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"4ce7d89135e48ba4b9bc4db43c82be28648e43275ed5b3d627547af3d90cf264"
				}
			],
			"description":"alsa-firmware contains binary drivers for various third-party products.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/alsa-firmware@1.2.4-3.oe2409?arch=noarch&epoch=0&upstream=alsa-firmware-1.2.4-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.alsa-project.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Firmware for cards",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.4-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-alsa-lib-1.2.10-b3206e76-3f2f-4a99-91b8-1a369557bb97-722b8472-5937-470b-b0d2-c3f8109b3759",
			"name":"alsa-lib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"555df45a57a503f23fcab285f39f2bcdbf6219de021ba17b0751f7fbf4734c5d"
				}
			],
			"description":"The alsa-lib is a library to interface with ALSA in the Linux kernel\nand virtual devices using a plugin system.\nMore detail: https://alsa.opensrc.org/Alsa-lib",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/alsa-lib@1.2.10-2.oe2409?arch=aarch64&epoch=0&upstream=alsa-lib-1.2.10-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://alsa-project.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"the user space library that developers compile ALSA applications against",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.10-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-f856ba90-51b9-4e9b-97dc-152f27490751",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-2180bcec-b4cd-4c9e-b6ee-2c13d700b861",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-fxload-2008-10-13-356fcddf-a93d-41a1-ac89-d3f54a322009-0074e4a8-55e1-41a4-a83f-e4348dfa722c",
			"name":"fxload",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d23bd9623af1efde019f1cbcca0f6baa7a7d4f45de7d8c34b6b5a358adc1e67a"
				}
			],
			"description":"It is conveniently able to download firmware into FX, FX2, and FX2LP EZ-USB devices,\nas well as the original AnchorChips EZ-USB. It is intended to be invoked by hotplug\nscripts when the unprogrammed device appears on the bus.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/fxload@2008_10_13-20.oe2409?arch=aarch64&epoch=0&upstream=fxload-2008_10_13-20.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://linux-hotplug.sourceforge.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A program which downloads firmware to USB devices",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2008_10_13-20.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-e03a8166-1914-4df2-889d-c87982bcc2fa",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-udev-255-9bd1878f-5859-4670-a188-2f3a0d81fc39-aed009aa-56ac-426d-ac70-ba57394fe5e0",
			"name":"systemd-udev",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"bfec3730174f1c2096c6876e83ba754d3cab48f904fa8d27cd225b16b77fa25e"
				}
			],
			"description":"This package contains systemd-udev and the rules and hardware database\nneeded to manage device nodes. This package is necessary on physical\nmachines and in virtual machines, but not in containers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd-udev@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Rule-based device node and kernel event manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-alsa-tools-firmware-1.2.5-9e0d10e7-61e4-48e2-adc3-d5bb5361a9d2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-alsa-firmware-1.2.4-d49e9cd2-4e14-4be5-8c9d-82f696cf82e8-a7409f75-ac03-4330-a7c4-bebfdd6e590b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-alsa-tools-firmware-1.2.5-9e0d10e7-61e4-48e2-adc3-d5bb5361a9d2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-alsa-lib-1.2.10-b3206e76-3f2f-4a99-91b8-1a369557bb97-722b8472-5937-470b-b0d2-c3f8109b3759"
		},
		{
			"spdxElementId":"SPDXRef-rpm-alsa-tools-firmware-1.2.5-9e0d10e7-61e4-48e2-adc3-d5bb5361a9d2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-f856ba90-51b9-4e9b-97dc-152f27490751"
		},
		{
			"spdxElementId":"SPDXRef-rpm-alsa-tools-firmware-1.2.5-9e0d10e7-61e4-48e2-adc3-d5bb5361a9d2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-2180bcec-b4cd-4c9e-b6ee-2c13d700b861"
		},
		{
			"spdxElementId":"SPDXRef-rpm-alsa-tools-firmware-1.2.5-9e0d10e7-61e4-48e2-adc3-d5bb5361a9d2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-fxload-2008-10-13-356fcddf-a93d-41a1-ac89-d3f54a322009-0074e4a8-55e1-41a4-a83f-e4348dfa722c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-alsa-tools-firmware-1.2.5-9e0d10e7-61e4-48e2-adc3-d5bb5361a9d2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-e03a8166-1914-4df2-889d-c87982bcc2fa"
		},
		{
			"spdxElementId":"SPDXRef-rpm-alsa-tools-firmware-1.2.5-9e0d10e7-61e4-48e2-adc3-d5bb5361a9d2",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-udev-255-9bd1878f-5859-4670-a188-2f3a0d81fc39-aed009aa-56ac-426d-ac70-ba57394fe5e0"
		}
	]
}