{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"docker-engine-2.18.09.0-341.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/docker-engine-2.18.09.0-341.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-8e364c43-804a-4515-a664-b47f8f3381c2",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-8924b5cb-f430-48ee-b381-f0e6f3ec7660",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-device-mapper-1.02.195-754304cb-319f-4a06-b6c2-50492d3df79b-3684eb32-2e79-416d-996a-5cbedb433bef",
			"name":"device-mapper",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"6b4e3c0a595a8c387dbd2844924138b0bbb667efc5a3cf9635c36097e08f9d32"
				}
			],
			"description":"Manages logical devices that use the device-mapper driver.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/device-mapper@1.02.195-11.oe2409?arch=aarch64&epoch=8&upstream=lvm2-2.03.21-11.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://sources.redhat.com/dm",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Low level logical volume management",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"8:1.02.195-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-9f1290f7-a614-4524-8ff9-9a460f42e5b6",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-iptables-1.8.9-dc11de83-09a5-47ef-80e8-90912b8e5367-f08ebf95-cb85-4b40-bd6b-273941caafa6",
			"name":"iptables",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7deafc31b2e62ff54e9f52ce52c89006a03834ffbb4298cb6c9ad5fed76bdcf1"
				}
			],
			"description":"Netfilter is a set of hooks inside the Linux kernel that allows kernel\nmodules to register callback functions with the network stack. A\nregistered callback function is then called back for every packet that\ntraverses the respective hook within the network stack.\n\nIptables is a generic table structure for the definition of rulesets.\nEach rule within an IP table consists of a number of classifiers\n(iptables matches) and one connected action (iptables target).\n\nNetfilter, ip_tables, connection tracking (ip_conntrack, nf_conntrack)\nand the NAT subsystem together build the major parts of the framework.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/iptables@1.8.9-5.oe2409?arch=aarch64&epoch=0&upstream=iptables-1.8.9-5.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.netfilter.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"IP packet filter administration utilities",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.8.9-5.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libseccomp-2.5.4-33e85e97-c884-4b33-acd7-3c90498c3339-c0284c28-102a-44d3-94b2-5bac22180325",
			"name":"libseccomp",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8587cac95cea90fa88a47c4da2937198c025b5b967e4b2180ea7285ccd16c533"
				}
			],
			"description":"The libseccomp library provides an easy to use, platform independent, interface to\nthe Linux Kernel's syscall filtering mechanism. The libseccomp API is designed to\nabstract away the underlying BPF based syscall filter language and present a more\nconventional function-call based filtering interface that should be familiar to,\nand easily adopted by, application developers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libseccomp@2.5.4-3.oe2409?arch=aarch64&epoch=0&upstream=libseccomp-2.5.4-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/seccomp/libseccomp",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Interface to the syscall filtering mechanism",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.5.4-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libtool-ltdl-2.4.7-7ad7f31b-6515-417e-a2e2-a169bedc3241-99b04035-352b-4a5d-9887-cd4e6c4d50b5",
			"name":"libtool-ltdl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"66598e87d516548af2b124d1827c828b54a233ad96c11806126c06f93e858ca2"
				}
			],
			"description":"The libtool-ltdl package contains the GNU Libtool Dynamic Module Loader, a\nlibrary that provides a consistent, portable interface which simplifies the\nprocess of using dynamic modules.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libtool-ltdl@2.4.7-3.oe2409?arch=aarch64&epoch=0&upstream=libtool-2.4.7-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/libtool/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Runtime libraries for GNU Libtool Dynamic Module Loader",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.4.7-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-b9a99c13-f976-4751-bad3-ab39515d4905",
			"name":"systemd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fbb6e242b644b0ba4ff5b0dd58e82c338e85dc72f01211275506496049450fb5"
				}
			],
			"description":"systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"System and Service Manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-7f1cc435-8437-4e4c-b478-d0012af29f45",
			"name":"systemd-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"26a509cd7fd1c13add8f97aa5ae9df983a62258b3cb32e08e0b2732ae39e3b9d"
				}
			],
			"description":"Libraries for systemd and udev.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd-libs@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"systemd libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-tar-1.35-404d2df1-5a3a-4b8e-b2fa-14d7dd8ad2d5-240476ee-b786-4f74-bf51-c1497cceeac9",
			"name":"tar",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a2cd91ffa50e3b1e20180ee00c53e72dbb47a8db59af2119dc7b0cb4bbd743b8"
				}
			],
			"description":"GNU Tar provides the ability to create tar archives, as well as various other\nkinds of manipulation. For example, you can use Tar on previously created archives\nto extract files, to store additional files, or to update or list files which were\nalready stored.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/tar@1.35-2.oe2409?arch=aarch64&epoch=2&upstream=tar-1.35-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/tar/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An organized and systematic method of controlling a large amount of data",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:1.35-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xz-5.4.7-a3276dac-5701-4078-accd-441da6142cb8-2b3d6d58-3fcc-48a9-9631-c6815d255e66",
			"name":"xz",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b0c5487eac6e3c3027f4ce0fdd9dbcb76909417529dacc4433dbc281170f1aef"
				}
			],
			"description":"XZ Utils is free general-purpose data compression software with a high compression ratio.\nXZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils.\n\nThe core of the XZ Utils compression code is based on LZMA SDK, but it has been modified quite a lot to be suitable for XZ Utils.\nThe primary compression algorithm is currently LZMA2, which is used inside the .xz container format. With typical files, XZ Utils create 30% smaller output than gzip and 15% smaller output than bzip2.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xz@5.4.7-1.oe2409?arch=aarch64&epoch=0&upstream=xz-5.4.7-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://tukaani.org/xz",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A free general-purpose data compreession software with LZMA2 algorithm",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.4.7-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-docker-engine-18.09.0-5ff53eca-85f3-4fbd-8d85-3b9de740a855",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-8e364c43-804a-4515-a664-b47f8f3381c2"
		},
		{
			"spdxElementId":"SPDXRef-rpm-docker-engine-18.09.0-5ff53eca-85f3-4fbd-8d85-3b9de740a855",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-8924b5cb-f430-48ee-b381-f0e6f3ec7660"
		},
		{
			"spdxElementId":"SPDXRef-rpm-docker-engine-18.09.0-5ff53eca-85f3-4fbd-8d85-3b9de740a855",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-device-mapper-1.02.195-754304cb-319f-4a06-b6c2-50492d3df79b-3684eb32-2e79-416d-996a-5cbedb433bef"
		},
		{
			"spdxElementId":"SPDXRef-rpm-docker-engine-18.09.0-5ff53eca-85f3-4fbd-8d85-3b9de740a855",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-9f1290f7-a614-4524-8ff9-9a460f42e5b6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-docker-engine-18.09.0-5ff53eca-85f3-4fbd-8d85-3b9de740a855",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-iptables-1.8.9-dc11de83-09a5-47ef-80e8-90912b8e5367-f08ebf95-cb85-4b40-bd6b-273941caafa6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-docker-engine-18.09.0-5ff53eca-85f3-4fbd-8d85-3b9de740a855",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libseccomp-2.5.4-33e85e97-c884-4b33-acd7-3c90498c3339-c0284c28-102a-44d3-94b2-5bac22180325"
		},
		{
			"spdxElementId":"SPDXRef-rpm-docker-engine-18.09.0-5ff53eca-85f3-4fbd-8d85-3b9de740a855",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libtool-ltdl-2.4.7-7ad7f31b-6515-417e-a2e2-a169bedc3241-99b04035-352b-4a5d-9887-cd4e6c4d50b5"
		},
		{
			"spdxElementId":"SPDXRef-rpm-docker-engine-18.09.0-5ff53eca-85f3-4fbd-8d85-3b9de740a855",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-b9a99c13-f976-4751-bad3-ab39515d4905"
		},
		{
			"spdxElementId":"SPDXRef-rpm-docker-engine-18.09.0-5ff53eca-85f3-4fbd-8d85-3b9de740a855",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-7f1cc435-8437-4e4c-b478-d0012af29f45"
		},
		{
			"spdxElementId":"SPDXRef-rpm-docker-engine-18.09.0-5ff53eca-85f3-4fbd-8d85-3b9de740a855",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-tar-1.35-404d2df1-5a3a-4b8e-b2fa-14d7dd8ad2d5-240476ee-b786-4f74-bf51-c1497cceeac9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-docker-engine-18.09.0-5ff53eca-85f3-4fbd-8d85-3b9de740a855",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xz-5.4.7-a3276dac-5701-4078-accd-441da6142cb8-2b3d6d58-3fcc-48a9-9631-c6815d255e66"
		}
	]
}