{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"gnupg2-0.2.4.3-2.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/gnupg2-0.2.4.3-2.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-dc5a2f1a-3d9d-47ab-babb-a7d24dcc5e54",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-e1bfc2a0-7fc2-4643-abe2-bb966a7d563a",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-4d8d8df9-75e2-4eb7-b654-4896137ece7f",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca-51c08b4d-725c-4c12-9253-7c61242d414d",
			"name":"gnutls",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"25d106732688d10e2195bfc8abf51987a13871c0e44ebf5c75b305c0e22812a1"
				}
			],
			"description":"GnuTLS is a secure communications library implementing the SSL, TLS and DTLS\nprotocols and technologies around them. It provides a simple C language\napplication programming interface (API) to access the secure communications\nprotocols as well as APIs to parse and write X.509, PKCS #12, and other\nrequired structures.\nThe project strives to provide a secure communications back-end, simple to use\nand integrated with the rest of the base Linux libraries. A back-end designed\nto work and be secure out of the box, keeping the complexity of TLS and PKI out\nof application code.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gnutls@3.8.2-4.oe2409?arch=aarch64&epoch=0&upstream=gnutls-3.8.2-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnutls.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU Secure Communication Protocol Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.8.2-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libassuan-2.5.6-0ac4652f-69b6-4637-90bc-e78d7580eec7-e4118c88-8d78-41dc-a0c2-4d4746c3118a",
			"name":"libassuan",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2610162e8bc5707599778261b0a306bd4bab12f45bd45cc80be89bc23f9533f6"
				}
			],
			"description":"A small library implementing the so-called Assuan protocal,which is used for IPC between most newer GnuPG cmponents,and provides\\\n\\ both server and client sides functions.\\",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libassuan@2.5.6-2.oe2409?arch=aarch64&epoch=0&upstream=libassuan-2.5.6-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnupg.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A small library implementing the so-called Assuan protocal",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.5.6-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgcrypt-1.10.2-9ef8ecfc-dfe7-4c78-b77c-bdf678a7b2e5-77908090-6a9b-4536-a71d-e519fa51ceb2",
			"name":"libgcrypt",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"38d0d5ac5204da894ca84c645f24862e77abec29922748bead302e4fd8e6eb1d"
				}
			],
			"description":"Libgcrypt is a general purpose cryptographic library originally based on code from GnuPG.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgcrypt@1.10.2-1.oe2409?arch=aarch64&epoch=0&upstream=libgcrypt-1.10.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnupg.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A general-purpose cryptography library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.10.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgpg-error-1.50-1e3d4a24-8221-4604-82d4-8cd17c09000a-1c9dce3d-8842-462d-8b34-dae3a4f9873e",
			"name":"libgpg-error",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fe4682620a8d2947fa1644e04c87e1c053805b66b5a50a3e027d8c70fcccc10a"
				}
			],
			"description":"The libgpg-error package contains a library that originally defines common error values for all GnuPG components.\nAmong these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt, Libksba, DirMngr, Pinentry, SCdaemon.\nBecause Libgpg-error is a common dependency all GnuPG components, more features will be added to this library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgpg-error@1.50-1.oe2409?arch=aarch64&epoch=0&upstream=libgpg-error-1.50-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnupg.org/related_software/libgpg-error/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library for common error values and messages in GnuPG components.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.50-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libksba-1.6.4-96511d7c-fe1a-42ba-8bc7-4e9fbe279013-36383dff-89ed-491a-a535-707b640bd3b5",
			"name":"libksba",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"00bc2ee550f6760093b70c633bc92916ee080e1816df9ce2ba3aac45696532a2"
				}
			],
			"description":"Libksba is a library to make the tasks of working with X.509 certificates,\nCMS data and related objects more easy. It provides a highlevel interface to\nthe implemented protocols and presents the data in a consistent way.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libksba@1.6.4-1.oe2409?arch=aarch64&epoch=0&upstream=libksba-1.6.4-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnupg.org/software/libksba/index.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library for X.509 and CMS",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.6.4-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-npth-1.6-fbb579ad-2f85-42ab-8062-b4395601336d-9c65b9b1-b60d-49df-b5a2-443e56084387",
			"name":"npth",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f846e2772275a26be6e13bd08355e1eef55e34a91dcbe62e384abf653f14b0fd"
				}
			],
			"description":"The NPth package contains a very portable POSIX/ANSI-C based\nlibrary for Unix platforms which provides non-preemptive\npriority-based scheduling for multiple threads of execution\n(multithreading) inside event-driven applications. All threads\nrun in the same address space of the server application, but\neach thread has its own individual program-counter, run-time\nstack, signal mask and errno variable.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/npth@1.6-7.oe2409?arch=aarch64&epoch=0&upstream=npth-1.6-7.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://git.gnupg.org/cgi-bin/gitweb.cgi?p=npth.git",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The New GNU Portable Threads library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.6-7.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-3179ca54-fdf6-4a8f-b870-c0c374208841",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-dc5a2f1a-3d9d-47ab-babb-a7d24dcc5e54"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-e1bfc2a0-7fc2-4643-abe2-bb966a7d563a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-4d8d8df9-75e2-4eb7-b654-4896137ece7f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca-51c08b4d-725c-4c12-9253-7c61242d414d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libassuan-2.5.6-0ac4652f-69b6-4637-90bc-e78d7580eec7-e4118c88-8d78-41dc-a0c2-4d4746c3118a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgcrypt-1.10.2-9ef8ecfc-dfe7-4c78-b77c-bdf678a7b2e5-77908090-6a9b-4536-a71d-e519fa51ceb2"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgpg-error-1.50-1e3d4a24-8221-4604-82d4-8cd17c09000a-1c9dce3d-8842-462d-8b34-dae3a4f9873e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libksba-1.6.4-96511d7c-fe1a-42ba-8bc7-4e9fbe279013-36383dff-89ed-491a-a535-707b640bd3b5"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-npth-1.6-fbb579ad-2f85-42ab-8062-b4395601336d-9c65b9b1-b60d-49df-b5a2-443e56084387"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnupg2-2.4.3-1aef17f2-196f-40a4-a35d-868543d80111",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-3179ca54-fdf6-4a8f-b870-c0c374208841"
		}
	]
}