{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"chrony-0.4.3-2.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/chrony-0.4.3-2.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-087a3eda-c1b1-47f5-8cac-eab1d053c599",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-3969763e-d557-4f6d-9f13-67d662afb952",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-258d8da2-23b2-4839-b2a7-9b742d34470b",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca-8be0a244-9138-4a5b-82f4-59772991faa4",
			"name":"gnutls",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"25d106732688d10e2195bfc8abf51987a13871c0e44ebf5c75b305c0e22812a1"
				}
			],
			"description":"GnuTLS is a secure communications library implementing the SSL, TLS and DTLS\nprotocols and technologies around them. It provides a simple C language\napplication programming interface (API) to access the secure communications\nprotocols as well as APIs to parse and write X.509, PKCS #12, and other\nrequired structures.\nThe project strives to provide a secure communications back-end, simple to use\nand integrated with the rest of the base Linux libraries. A back-end designed\nto work and be secure out of the box, keeping the complexity of TLS and PKI out\nof application code.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gnutls@3.8.2-4.oe2409?arch=aarch64&epoch=0&upstream=gnutls-3.8.2-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnutls.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU Secure Communication Protocol Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.8.2-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libcap-2.69-7ce44255-2200-417a-98d3-6f3cb1d31109-9e0bb45a-008b-450e-9fe6-ed254bae20c8",
			"name":"libcap",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"04940dafdf5ee9421aae3b19af992eebdba803500f4fc019a700b9a85c377590"
				}
			],
			"description":"This is a library for getting and setting POSIX.1e (formerly POSIX 6)\ndraft 15 capabilities.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libcap@2.69-3.oe2409?arch=aarch64&epoch=0&upstream=libcap-2.69-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://sites.google.com/site/fullycapable",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library for getting and setting POSIX.1e draft 15 capabilities",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.69-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libedit-3.1-75744f20-48a4-4d77-942f-cf4d66fba15b-44984809-25b1-4ee6-8d0d-872b04480715",
			"name":"libedit",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"597318307ebc01f860ae671546679b935a03e83859f8d8022117d518a74c8459"
				}
			],
			"description":"Libedit is the automatic tool and libtoolized port of the NetBSD Editline library.\nIt provides generic line editing, history, and markup functions similar to\nthose in GNU Readline.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libedit@3.1-33.oe2409?arch=aarch64&epoch=0&upstream=libedit-3.1-33.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.thrysoee.dk/editline/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The NetBSD Editline library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.1-33.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libseccomp-2.5.4-33e85e97-c884-4b33-acd7-3c90498c3339-298cdf38-4665-44a0-baa7-87a2f5d9c4b2",
			"name":"libseccomp",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8587cac95cea90fa88a47c4da2937198c025b5b967e4b2180ea7285ccd16c533"
				}
			],
			"description":"The libseccomp library provides an easy to use, platform independent, interface to\nthe Linux Kernel's syscall filtering mechanism. The libseccomp API is designed to\nabstract away the underlying BPF based syscall filter language and present a more\nconventional function-call based filtering interface that should be familiar to,\nand easily adopted by, application developers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libseccomp@2.5.4-3.oe2409?arch=aarch64&epoch=0&upstream=libseccomp-2.5.4-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/seccomp/libseccomp",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Interface to the syscall filtering mechanism",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.5.4-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-nettle-3.8.1-eec2cdc6-8436-4f42-b5a7-872761775e1e-3ac2bc60-d30f-4438-ab49-65174647559a",
			"name":"nettle",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2c589b03786dd2cbab8dd084545b0e71eec93333a3d336f87b82f6559073729b"
				}
			],
			"description":"Nettle is a cryptographic library designed to fit any context:\nin crypto toolkits for object-oriented languages, in applications\nlike LSH or GnuPG, or even in kernel space.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/nettle@3.8.1-1.oe2409?arch=aarch64&epoch=0&upstream=nettle-3.8.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.lysator.liu.se/~nisse/nettle/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A low-level cryptographic library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.8.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b-be469299-847e-4050-96e1-9637086807b6",
			"name":"shadow",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0b4e5e30e7e79208c364dc951155b341b6353207412480e6adf95f89d270d9a9"
				}
			],
			"description":"This package includes the necessary programs for converting plain\npassword files to the shadow password format and to manage user and\ngroup accounts.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/shadow@4.14.3-4.oe2409?arch=aarch64&epoch=2&upstream=shadow-4.14.3-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://pkg-shadow.alioth.debian.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Tools for managing accounts and shadow password files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:4.14.3-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-4cf8b9de-6e09-4d2c-86d3-0fb126f6a4ef",
			"name":"systemd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fbb6e242b644b0ba4ff5b0dd58e82c338e85dc72f01211275506496049450fb5"
				}
			],
			"description":"systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"System and Service Manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-timedatex-0.6-3df5604a-9000-4d4a-b8af-2300f34eb608-d6b8b170-1fa1-4aab-a902-2cfb4c384996",
			"name":"timedatex",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c79a4a8ed7f9ec166f065f66b79a957f778308f3658c0704cb23edfbc1060e55"
				}
			],
			"description":"timedatex is a D-Bus service that implements the org.freedesktop.timedate1\ninterface. It can be used to read and set the system clock, the real-time clock\n(RTC), the system timezone, get a list of valid timezones, and enable or\ndisable an NTP client installed on the system. It is a replacement for the\nsystemd-timedated service.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/timedatex@0.6-3.oe2409?arch=aarch64&epoch=0&upstream=timedatex-0.6-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/mlichvar/timedatex",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"D-Bus service for system clock and RTC settings",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.6-3.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-chrony-4.3-6118145d-b94d-43e8-9b15-f38bbdfde1c8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-087a3eda-c1b1-47f5-8cac-eab1d053c599"
		},
		{
			"spdxElementId":"SPDXRef-rpm-chrony-4.3-6118145d-b94d-43e8-9b15-f38bbdfde1c8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-3969763e-d557-4f6d-9f13-67d662afb952"
		},
		{
			"spdxElementId":"SPDXRef-rpm-chrony-4.3-6118145d-b94d-43e8-9b15-f38bbdfde1c8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-258d8da2-23b2-4839-b2a7-9b742d34470b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-chrony-4.3-6118145d-b94d-43e8-9b15-f38bbdfde1c8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca-8be0a244-9138-4a5b-82f4-59772991faa4"
		},
		{
			"spdxElementId":"SPDXRef-rpm-chrony-4.3-6118145d-b94d-43e8-9b15-f38bbdfde1c8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libcap-2.69-7ce44255-2200-417a-98d3-6f3cb1d31109-9e0bb45a-008b-450e-9fe6-ed254bae20c8"
		},
		{
			"spdxElementId":"SPDXRef-rpm-chrony-4.3-6118145d-b94d-43e8-9b15-f38bbdfde1c8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libedit-3.1-75744f20-48a4-4d77-942f-cf4d66fba15b-44984809-25b1-4ee6-8d0d-872b04480715"
		},
		{
			"spdxElementId":"SPDXRef-rpm-chrony-4.3-6118145d-b94d-43e8-9b15-f38bbdfde1c8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libseccomp-2.5.4-33e85e97-c884-4b33-acd7-3c90498c3339-298cdf38-4665-44a0-baa7-87a2f5d9c4b2"
		},
		{
			"spdxElementId":"SPDXRef-rpm-chrony-4.3-6118145d-b94d-43e8-9b15-f38bbdfde1c8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-nettle-3.8.1-eec2cdc6-8436-4f42-b5a7-872761775e1e-3ac2bc60-d30f-4438-ab49-65174647559a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-chrony-4.3-6118145d-b94d-43e8-9b15-f38bbdfde1c8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b-be469299-847e-4050-96e1-9637086807b6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-chrony-4.3-6118145d-b94d-43e8-9b15-f38bbdfde1c8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-4cf8b9de-6e09-4d2c-86d3-0fb126f6a4ef"
		},
		{
			"spdxElementId":"SPDXRef-rpm-chrony-4.3-6118145d-b94d-43e8-9b15-f38bbdfde1c8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-timedatex-0.6-3df5604a-9000-4d4a-b8af-2300f34eb608-d6b8b170-1fa1-4aab-a902-2cfb4c384996"
		}
	]
}