{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"git-core-0.2.46.0-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/git-core-0.2.46.0-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-a7afa146-12e7-42f2-adba-864995181586",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-8df6b937-cb89-4991-b811-782ff34746a7",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-expat-2.6.2-7d25a08f-11ae-480f-ba2d-8d8d1af332f6-4e33b019-717f-4e5f-9241-8f779e0ab036",
			"name":"expat",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"3789391c6958f4728e77e0394317dea13115936981c16b4cac36a15daeebe143"
				}
			],
			"description":"expat is a stream-oriented XML parser library written in C.\nexpat excels with files too large to fit RAM, and where\nperformance and flexibility are crucial.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/expat@2.6.2-1.oe2409?arch=aarch64&epoch=0&upstream=expat-2.6.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://libexpat.github.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An XML parser library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.6.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-b3936bb3-7559-47f0-932b-9c80ff5e06e9",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-less-661-5d1737ac-404c-4be4-b99d-33f1d7a887a2-324edc65-36a6-419c-a7ab-3ffeda72e426",
			"name":"less",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"db8d37b74293b901668491c028dbfe44189e9177ccdcf1454f88cd48ee431020"
				}
			],
			"description":"Less is a pager. A pager is a program that displays text files.\nOther pagers commonly in use are more and pg. Pagers are often\nused in command-line environments like the Unix shell and the MS-DOS\ncommand prompt to display files.\n\nLess is not an editor. You can't change the contents of the file\nyou're viewing. Less is not a windowing system. It doesn't have\nfancy scroll bars or other GUI (graphical user interface) elements.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/less@661-2.oe2409?arch=aarch64&epoch=0&upstream=less-661-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.greenwoodsoftware.com/less",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Less is a pager that displays text files.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:661-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-1506b4e2-9733-43a3-a114-614d7af1db4a",
			"name":"libcurl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8a4146b16a44d1cb6dc77162ee1c9bec31aca0454e89eb870073c3f2d27ac553"
				}
			],
			"description":"A library for getting files from web servers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libcurl@8.4.0-10.oe2409?arch=aarch64&epoch=0&upstream=curl-8.4.0-10.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://curl.se/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library for getting files from web servers",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.4.0-10.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-openssh-clients-9.3p2-1bd47a7b-afbc-4c93-915c-98ed224eda64-256bb17b-a79c-4cc4-9e89-a39eff2475e3",
			"name":"openssh-clients",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"eb8a28c6da9e95b6873196462fdd9d38d329776a9727a0773ff255a1941b9644"
				}
			],
			"description":"OpenSSH is a free version of SSH (Secure SHell), a program for logging\ninto and executing commands on a remote machine. This package includes\nthe clients necessary to make encrypted connections to SSH servers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/openssh-clients@9.3p2-4.oe2409?arch=aarch64&epoch=0&upstream=openssh-9.3p2-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.openssh.com/portable.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An open source SSH client applications",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.3p2-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-683dfdd9-0c9a-4bd0-9b6e-06290fcaa5f9",
			"name":"openssl-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fe8a21dc03d6c950264c4aa621ea0c4145da06ac2541c987a442ec2c8af13cfe"
				}
			],
			"description":"The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/openssl-libs@3.0.12-8.oe2409?arch=aarch64&epoch=1&upstream=openssl-3.0.12-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.openssl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A general purpose cryptography library with TLS implementation",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:3.0.12-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-pcre2-10.42-90b15ffe-b336-4085-8114-08d343102ad7-9352256b-dc9c-4ac0-88f2-9949ee4bbfb5",
			"name":"pcre2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"63b16a0eebb21b4266321ddd621236057efc7045b85cfe771148d2629b89eb8d"
				}
			],
			"description":"PCRE2 is a re-working of the original PCRE1 library to provide an entirely new\nAPI. Since its initial release in 2015, there has been further development of\nthe code and it now differs from PCRE1 in more than just the API.\nPCRE2 is written in C, and it has its own API. There are three sets of\nfunctions, one for the 8-bit library, which processes strings of bytes, one for\nthe 16-bit library, which processes strings of 16-bit values, and one for the\n32-bit library, which processes strings of 32-bit values. Unlike PCRE1, there\nare no C++ wrappers.\n\nThe distribution does contain a set of C wrapper functions for the 8-bit\nlibrary that are based on the POSIX regular expression API (see the pcre2posix\nman page). These are built into a library called libpcre2-posix. Note that this\njust provides a POSIX calling interface to PCRE2; the regular expressions\nthemselves still follow Perl syntax and semantics. The POSIX API is restricted,\nand does not give full access to all of PCRE2's facilities.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/pcre2@10.42-9.oe2409?arch=aarch64&epoch=0&upstream=pcre2-10.42-9.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.pcre.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Perl Compatible Regular Expressions",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:10.42-9.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-dd2ecc5e-3050-42a8-8dfa-5f7cca1c785b",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-git-core-2.46.0-fdb599f7-97c6-40ae-9d1c-26107347502e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-a7afa146-12e7-42f2-adba-864995181586"
		},
		{
			"spdxElementId":"SPDXRef-rpm-git-core-2.46.0-fdb599f7-97c6-40ae-9d1c-26107347502e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-8df6b937-cb89-4991-b811-782ff34746a7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-git-core-2.46.0-fdb599f7-97c6-40ae-9d1c-26107347502e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-expat-2.6.2-7d25a08f-11ae-480f-ba2d-8d8d1af332f6-4e33b019-717f-4e5f-9241-8f779e0ab036"
		},
		{
			"spdxElementId":"SPDXRef-rpm-git-core-2.46.0-fdb599f7-97c6-40ae-9d1c-26107347502e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-b3936bb3-7559-47f0-932b-9c80ff5e06e9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-git-core-2.46.0-fdb599f7-97c6-40ae-9d1c-26107347502e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-less-661-5d1737ac-404c-4be4-b99d-33f1d7a887a2-324edc65-36a6-419c-a7ab-3ffeda72e426"
		},
		{
			"spdxElementId":"SPDXRef-rpm-git-core-2.46.0-fdb599f7-97c6-40ae-9d1c-26107347502e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-1506b4e2-9733-43a3-a114-614d7af1db4a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-git-core-2.46.0-fdb599f7-97c6-40ae-9d1c-26107347502e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-openssh-clients-9.3p2-1bd47a7b-afbc-4c93-915c-98ed224eda64-256bb17b-a79c-4cc4-9e89-a39eff2475e3"
		},
		{
			"spdxElementId":"SPDXRef-rpm-git-core-2.46.0-fdb599f7-97c6-40ae-9d1c-26107347502e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-683dfdd9-0c9a-4bd0-9b6e-06290fcaa5f9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-git-core-2.46.0-fdb599f7-97c6-40ae-9d1c-26107347502e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-pcre2-10.42-90b15ffe-b336-4085-8114-08d343102ad7-9352256b-dc9c-4ac0-88f2-9949ee4bbfb5"
		},
		{
			"spdxElementId":"SPDXRef-rpm-git-core-2.46.0-fdb599f7-97c6-40ae-9d1c-26107347502e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-dd2ecc5e-3050-42a8-8dfa-5f7cca1c785b"
		}
	]
}