{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"gcr4-0.4.0.0-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/gcr4-0.4.0.0-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-d7c161c0-6c58-4f60-a456-dbea7e57dc26",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-980a08a2-9d0d-44bf-8977-82ec2f041e29",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gcr4-base-4.0.0-3466fb1a-f0ac-434c-8837-931b3fe25e94-e737d69e-67e9-4950-9242-521f52b58765",
			"name":"gcr4-base",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f16baa3976074e51bc842c5c7ac15d33a7778b94d79512875642d841dd7b6056"
				}
			],
			"description":"The gcr-base package includes the gcr-base library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gcr4-base@4.0.0-1.oe2409?arch=aarch64&epoch=0&upstream=gcr4-4.0.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://wiki.gnome.org/Projects/CryptoGlue",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library files for gcr",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.0.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-3c7c740e-1cdb-44ca-bd79-7d94c73d0990",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-023d67c1-fde7-443f-8a0f-3ddd9b1fff40",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gtk4-4.10.5-c0373406-911e-448b-b5b9-39126350c756-dc835347-d3cf-454d-bd18-ace0f31f1312",
			"name":"gtk4",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"34fbcf1e7cb500b26c781182be15ad2a264f6fb869ea5331b5d1a9e48872452d"
				}
			],
			"description":"GTK is a multi-platform toolkit for creating graphical user\ninterfaces. Offering a complete set of widgets, GTK is suitable for\nprojects ranging from small one-off tools to complete application\nsuites.\n\nThis package contains version 4 of GTK.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gtk4@4.10.5-1.oe2409?arch=aarch64&epoch=0&upstream=gtk4-4.10.5-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GTK graphical user interface library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.10.5-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libsecret-0.20.5-1b4772ab-530a-4b1f-aef2-fe6c3d6520ed-eee0786f-69e2-4dcd-991a-a3d7a851b317",
			"name":"libsecret",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"776f937dc02554033edbe4e2d0761aeee99b0f008d1be1d970572fbef3025f40"
				}
			],
			"description":"A GObject-based library for accessing the Secret Service API of the freedesktop.org\nproject, a cross-desktop effort to access passwords, tokens and other types of secrets.\nlibsecret provides a convenient wrapper for these methods so consumers do not have to\ncall the low-level DBus methods.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libsecret@0.20.5-2.oe2409?arch=aarch64&epoch=0&upstream=libsecret-0.20.5-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://wiki.gnome.org/Projects/Libsecret",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library for storing and retrieving passwords and other secrets",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.20.5-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-openssh-clients-9.3p2-1bd47a7b-afbc-4c93-915c-98ed224eda64-c83992ff-6bb3-43db-ad4c-8974933166eb",
			"name":"openssh-clients",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"eb8a28c6da9e95b6873196462fdd9d38d329776a9727a0773ff255a1941b9644"
				}
			],
			"description":"OpenSSH is a free version of SSH (Secure SHell), a program for logging\ninto and executing commands on a remote machine. This package includes\nthe clients necessary to make encrypted connections to SSH servers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/openssh-clients@9.3p2-4.oe2409?arch=aarch64&epoch=0&upstream=openssh-9.3p2-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.openssh.com/portable.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An open source SSH client applications",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.3p2-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9-e4e33ee1-4a6f-4947-a251-131aebf25c57",
			"name":"pango",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d0e418b3de79e6ede6bbcc86497334d2a2864bd7f39f616fe2dc1e7a599750a6"
				}
			],
			"description":"Pango is a library for laying out and rendering of text, with an emphasis\non internationalization. Pango can be used anywhere that text layout is needed,\nthough most of the work on Pango so far has been done in the context of the\nGTK+ widget toolkit. Pango forms the core of text and font handling for GTK+.\n\nPango is designed to be modular; the core Pango layout engine can be used\nwith different font backends.\n\nThe integration of Pango with Cairo provides a complete solution with high\nquality text handling and graphics rendering.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/pango@1.52.1-1.oe2409?arch=aarch64&epoch=0&upstream=pango-1.52.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://pango.gnome.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"System for layout and rendering of internationalized text",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.52.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-def9e5a2-ba57-4db9-813c-4cf39f570c38",
			"name":"systemd-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"26a509cd7fd1c13add8f97aa5ae9df983a62258b3cb32e08e0b2732ae39e3b9d"
				}
			],
			"description":"Libraries for systemd and udev.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd-libs@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"systemd libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-gcr4-4.0.0-10a3f69d-892f-4972-8dd3-25d28e2b6543",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-d7c161c0-6c58-4f60-a456-dbea7e57dc26"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gcr4-4.0.0-10a3f69d-892f-4972-8dd3-25d28e2b6543",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-980a08a2-9d0d-44bf-8977-82ec2f041e29"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gcr4-4.0.0-10a3f69d-892f-4972-8dd3-25d28e2b6543",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gcr4-base-4.0.0-3466fb1a-f0ac-434c-8837-931b3fe25e94-e737d69e-67e9-4950-9242-521f52b58765"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gcr4-4.0.0-10a3f69d-892f-4972-8dd3-25d28e2b6543",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-3c7c740e-1cdb-44ca-bd79-7d94c73d0990"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gcr4-4.0.0-10a3f69d-892f-4972-8dd3-25d28e2b6543",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-023d67c1-fde7-443f-8a0f-3ddd9b1fff40"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gcr4-4.0.0-10a3f69d-892f-4972-8dd3-25d28e2b6543",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gtk4-4.10.5-c0373406-911e-448b-b5b9-39126350c756-dc835347-d3cf-454d-bd18-ace0f31f1312"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gcr4-4.0.0-10a3f69d-892f-4972-8dd3-25d28e2b6543",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libsecret-0.20.5-1b4772ab-530a-4b1f-aef2-fe6c3d6520ed-eee0786f-69e2-4dcd-991a-a3d7a851b317"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gcr4-4.0.0-10a3f69d-892f-4972-8dd3-25d28e2b6543",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-openssh-clients-9.3p2-1bd47a7b-afbc-4c93-915c-98ed224eda64-c83992ff-6bb3-43db-ad4c-8974933166eb"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gcr4-4.0.0-10a3f69d-892f-4972-8dd3-25d28e2b6543",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-pango-1.52.1-de4f0079-59c3-40cd-9a56-39a8c8dbe9b9-e4e33ee1-4a6f-4947-a251-131aebf25c57"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gcr4-4.0.0-10a3f69d-892f-4972-8dd3-25d28e2b6543",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-def9e5a2-ba57-4db9-813c-4cf39f570c38"
		}
	]
}