{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"cdrdao-0.1.2.5-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/cdrdao-0.1.2.5-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-70bf6441-3b81-4325-83be-601d0bb52e34",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-lame-3.100-ba6057ea-8a43-4ba4-977b-0b73c90eefa7-f6e90718-56a8-4f5d-8523-899cd7ede260",
			"name":"lame",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"3b7f63fdbb6456c280fcc753c14e40456277293c589eae875501826cb7f4fb59"
				}
			],
			"description":"LAME is a high quality MPEG Audio Layer III (MP3) encoder.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/lame@3.100-11.oe2409?arch=aarch64&epoch=0&upstream=lame-3.100-11.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://lame.sourceforge.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Free MP3 audio compressor",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.100-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libao-1.2.2-aec88baa-edbd-4737-adc4-fa237bbdece1-b89bae6a-271d-4abd-a3ca-8b453243f33b",
			"name":"libao",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"5bfb4439f12c4448245b3020f8ce9003428954497fb8d5f83fc4c26ed62a24c1"
				}
			],
			"description":"Libao is a cross-platform audio library that allows programs to output audio\nusing a simple API on a wide variety of platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libao@1.2.2-2.oe2409?arch=aarch64&epoch=0&upstream=libao-1.2.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://xiph.org/ao/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A cross platform audio library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.2-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-67d5e272-72e7-4b69-a52b-287f38fdf0fa",
			"name":"libgcc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"700457c78fbb872d696bce55dad909a5654b5f3b74614495a9778e90553d6701"
				}
			],
			"description":"This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgcc@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GCC version 12 shared support library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libmad-0.16.3-1ea4bfbc-6ff6-4f7d-a57b-1c1f4bcbf426-9eb81182-f8ca-4d87-8f58-cac64135a12c",
			"name":"libmad",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"194ddf460cf380bc161d67a641b3a0cb542084a69d24e8c4c213a32a7659476e"
				}
			],
			"description":"MAD is a high-quality MPEG audio decoder. It currently supports MPEG-1\nand the MPEG-2 extension to Lower Sampling Frequencies, as well as the\nso-called MPEG 2.5 format. All three audio layers (Layer I, Layer II,\nand Layer III a.k.a. MP3) are fully implemented.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libmad@0.16.3-1.oe2409?arch=aarch64&epoch=0&upstream=libmad-0.16.3-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://codeberg.org/tenacityteam/libmad",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"MPEG audio decoder library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.16.3-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-40c85f87-966d-496d-8822-9ac843076534",
			"name":"libstdc++",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e5b9ad5cd37731d9a30e5e617d61dfe47bdab86310fee1fe3d09dd7d3240f407"
				}
			],
			"description":"The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libstdc++@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU Standard C++ Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libvorbis-1.3.7-13817f71-aa55-47d1-8d4f-61fa46b1430b-c5b79b98-4000-4752-9a5a-8d676d3963a5",
			"name":"libvorbis",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"9397eaa180c6542d51b3a185e7ca69a81fe1fc5064089b2b3fb2117997ec14e2"
				}
			],
			"description":"Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free,\ngeneral-purpose compressed audio format for audio and music at fixed\nand variable bitrates.\nThe libvorbis package provides both a standard encoder and decoder runtime\nlibraries  under a BSD license.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libvorbis@1.3.7-3.oe2409?arch=aarch64&epoch=1&upstream=libvorbis-1.3.7-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.xiph.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The Vorbis General Audio Compression Codec",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.3.7-3.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-cdrdao-1.2.5-2d79b5d7-8e0b-4e20-b227-b682fbdcdaae",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-70bf6441-3b81-4325-83be-601d0bb52e34"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cdrdao-1.2.5-2d79b5d7-8e0b-4e20-b227-b682fbdcdaae",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-lame-3.100-ba6057ea-8a43-4ba4-977b-0b73c90eefa7-f6e90718-56a8-4f5d-8523-899cd7ede260"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cdrdao-1.2.5-2d79b5d7-8e0b-4e20-b227-b682fbdcdaae",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libao-1.2.2-aec88baa-edbd-4737-adc4-fa237bbdece1-b89bae6a-271d-4abd-a3ca-8b453243f33b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cdrdao-1.2.5-2d79b5d7-8e0b-4e20-b227-b682fbdcdaae",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-67d5e272-72e7-4b69-a52b-287f38fdf0fa"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cdrdao-1.2.5-2d79b5d7-8e0b-4e20-b227-b682fbdcdaae",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libmad-0.16.3-1ea4bfbc-6ff6-4f7d-a57b-1c1f4bcbf426-9eb81182-f8ca-4d87-8f58-cac64135a12c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cdrdao-1.2.5-2d79b5d7-8e0b-4e20-b227-b682fbdcdaae",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-40c85f87-966d-496d-8822-9ac843076534"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cdrdao-1.2.5-2d79b5d7-8e0b-4e20-b227-b682fbdcdaae",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libvorbis-1.3.7-13817f71-aa55-47d1-8d4f-61fa46b1430b-c5b79b98-4000-4752-9a5a-8d676d3963a5"
		}
	]
}