{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"cvs-0.1.11.23-53.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/cvs-0.1.11.23-53.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-f259f42f-33f5-4a13-a612-cbeb02826bd2",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-137ad98d-23fd-40b6-bc73-04b8db18957d",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-7b2d7ea7-4f50-473a-94b7-de5ef40df51d",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-krb5-libs-1.21.2-5b5f245d-b846-448c-abe3-a10f98447643-be901405-abcc-49d6-a3aa-746be48efc04",
			"name":"krb5-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"03db1c6971ffe085ff9115e2917a3c87b1aab8bf136123a5fa3ed575ebb1ff22"
				}
			],
			"description":"This package contains the shared libraries needed by Kerberos 5.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/krb5-libs@1.21.2-8.oe2409?arch=aarch64&epoch=0&upstream=krb5-1.21.2-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://web.mit.edu/kerberos/www/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The non-admin shared libraries used by Kerberos 5",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.21.2-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxcrypt-4.4.36-fcdbfeb7-9762-4a82-ba03-6bad05eddcad-b1851c51-2451-4a98-9a17-72c91a730bc1",
			"name":"libxcrypt",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2d3d32dd99e7e6cdc72d73e089dfe22f2b047519bdba4bf73561f998fcaeed3b"
				}
			],
			"description":"libxcrypt is a modern library for one-way hashing of passwords.\nIt supports a wide variety of both modern and historical hashing\nmethods: yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt,\nsha256crypt, md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt,\nand descrypt. It provides the traditional Unix crypt and crypt_r\ninterfaces, as well as a set of extended interfaces pioneered by\nOpenwall Linux, crypt_rn, crypt_ra, crypt_gensalt, crypt_gensalt_rn,\nand crypt_gensalt_ra.\nlibxcrypt is intended to be used by login(1), passwd(1), and other\nsimilar programs; that is, to hash a small number of passwords during\nan interactive authentication dialogue with a human. It is not suitable\nfor use in bulk password-cracking applications, or in any other situation\nwhere speed is more important than careful handling of sensitive data.\nHowever, it is intended to be fast and lightweight enough for use in\nservers that must field thousands of login attempts per minute.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxcrypt@4.4.36-2.oe2409?arch=aarch64&epoch=0&upstream=libxcrypt-4.4.36-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/besser82/libxcrypt",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Extended crypt library for DES, MD5, Blowfish and others",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.4.36-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-pam-1.5.3-2802a47e-4a4c-4ddb-9002-fc8e286d89a2-de519a3c-0d62-48d6-8c6e-be454b777793",
			"name":"pam",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"261afddfc0f32b9652edcbb08047b600abc591b78799fb4693aee9dc2d1db3b6"
				}
			],
			"description":"PAM (Pluggable Authentication Modules) is a system of libraries that\nhandle the authentication tasks of applications (services) on the system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/pam@1.5.3-6.oe2409?arch=aarch64&epoch=0&upstream=pam-1.5.3-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.linux-pam.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Pluggable Authentication Modules for Linux",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.5.3-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-d2765f59-5cd9-48d7-9640-d1177ff4a10d",
			"name":"systemd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fbb6e242b644b0ba4ff5b0dd58e82c338e85dc72f01211275506496049450fb5"
				}
			],
			"description":"systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"System and Service Manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-vim-minimal-9.0.2092-c2763173-f2e1-42d5-8673-96b7c1474d43-cf902d04-8d6b-42c7-b839-c6024ddea5cd",
			"name":"vim-minimal",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"80e6467df2152afe81cd8edabc6241146abcb16bf9c63c63eeb64848508519dc"
				}
			],
			"description":"The minimal package provides a minimal version of vim editor. It will be installed as /usr/bin/vi.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/vim-minimal@9.0.2092-11.oe2409?arch=aarch64&epoch=2&upstream=vim-9.0.2092-11.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.vim.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"This package provides the basic and minimal functionalities of vim editor.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:9.0.2092-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xinetd-2.3.15-c455eb52-9ee2-42ea-868e-3d15ab1a93e0-bf9a9239-832a-4d46-93ca-7ace4067d19d",
			"name":"xinetd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8f7372c9580edcefcb9e740819fb02d869f4e8615efa6ba1aca4f24fc3a9b8a9"
				}
			],
			"description":"xinetd is a powerful replacement for inetd.\n\nxinetd has access control mechanisms, extensive logging capabilities,\nthe ability to make services available based on time, can place\nlimits on the number of servers that can be started, and has deployable\ndefence mechanisms to protect against port scanners, among other things.\n\nxinetd listens for incoming requests over a network and launches the\nappropriate service for that request. Requests are made using port numbers\nas identifiers and xinetd usually launches another daemon to handle the\nrequest. It can be used to start services with both privileged and\nnon-privileged port numbers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xinetd@2.3.15-35.oe2409?arch=aarch64&epoch=2&upstream=xinetd-2.3.15-35.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/openSUSE/xinetd",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A super-server daemon that manages Internet-based connectivity",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:2.3.15-35.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-63550874-160c-4a39-9420-6b3683cdd67b",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-cvs-1.11.23-8629802f-223a-4b56-9a38-cee160aa20e8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-f259f42f-33f5-4a13-a612-cbeb02826bd2"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cvs-1.11.23-8629802f-223a-4b56-9a38-cee160aa20e8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-137ad98d-23fd-40b6-bc73-04b8db18957d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cvs-1.11.23-8629802f-223a-4b56-9a38-cee160aa20e8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-7b2d7ea7-4f50-473a-94b7-de5ef40df51d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cvs-1.11.23-8629802f-223a-4b56-9a38-cee160aa20e8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-krb5-libs-1.21.2-5b5f245d-b846-448c-abe3-a10f98447643-be901405-abcc-49d6-a3aa-746be48efc04"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cvs-1.11.23-8629802f-223a-4b56-9a38-cee160aa20e8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxcrypt-4.4.36-fcdbfeb7-9762-4a82-ba03-6bad05eddcad-b1851c51-2451-4a98-9a17-72c91a730bc1"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cvs-1.11.23-8629802f-223a-4b56-9a38-cee160aa20e8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-pam-1.5.3-2802a47e-4a4c-4ddb-9002-fc8e286d89a2-de519a3c-0d62-48d6-8c6e-be454b777793"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cvs-1.11.23-8629802f-223a-4b56-9a38-cee160aa20e8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-d2765f59-5cd9-48d7-9640-d1177ff4a10d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cvs-1.11.23-8629802f-223a-4b56-9a38-cee160aa20e8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-vim-minimal-9.0.2092-c2763173-f2e1-42d5-8673-96b7c1474d43-cf902d04-8d6b-42c7-b839-c6024ddea5cd"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cvs-1.11.23-8629802f-223a-4b56-9a38-cee160aa20e8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xinetd-2.3.15-c455eb52-9ee2-42ea-868e-3d15ab1a93e0-bf9a9239-832a-4d46-93ca-7ace4067d19d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-cvs-1.11.23-8629802f-223a-4b56-9a38-cee160aa20e8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-63550874-160c-4a39-9420-6b3683cdd67b"
		}
	]
}