{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"gnutls-0.3.8.2-4.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/gnutls-0.3.8.2-4.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-crypto-policies-20230614-b23a152d-aecb-42e0-81d0-c86ed8aabde7-c86da162-74b0-4201-be10-3e8a2de65bdb",
			"name":"crypto-policies",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"792a30caac8cdb61fb4fd9c2fea314d12ab60f2703663d6c768b6aa8e4b16bdb"
				}
			],
			"description":"This package provides update-crypto-policies, which is a tool that sets\nthe policy applicable for the various cryptographic back-ends, such as\nSSL/TLS libraries. The policy set by the tool will be the default policy\nused by these back-ends unless the application user configures them otherwise.\nhttps://fedoraproject.org/wiki/Changes/CryptoPolicy",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/crypto-policies@20230614-2.git5f3458e.oe2409?arch=noarch&epoch=0&upstream=crypto-policies-20230614-2.git5f3458e.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gitlab.com/redhat-crypto/fedora-crypto-policies",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Crypto policies package for Fedora",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:20230614-2.git5f3458e.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-bccfa124-55a3-4a7e-9df5-2a8085609e24",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gmp-6.3.0-86b13f91-2fb9-4644-bb8d-72f6ad2cfed1-f0fe986c-f2b1-4dd5-b4b7-68b71184dc21",
			"name":"gmp",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a1c322fad371cc2048896e9117971e3cd3c6cc8a2a05aa96d0dd72d53637842e"
				}
			],
			"description":"GMP is a portable library written in C for arbitrary precision arithmetic\non integers, rational numbers, and floating-point numbers. It aims to provide\nthe fastest possible arithmetic for all applications that need higher\nprecision than is directly supported by the basic C types.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gmp@6.3.0-3.oe2409?arch=aarch64&epoch=1&upstream=gmp-6.3.0-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gmplib.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A GNU multiple precision arithmetic library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:6.3.0-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-fd3e0a68-ed8d-43d8-9a15-cd343a1d2cb9",
			"name":"libgcc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"700457c78fbb872d696bce55dad909a5654b5f3b74614495a9778e90553d6701"
				}
			],
			"description":"This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgcc@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GCC version 12 shared support library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libidn2-2.3.7-20589ce2-5bf7-49ad-a995-ad2568745666-a6265a5a-7414-4bfc-aee0-b2a94df08452",
			"name":"libidn2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f0dcd7caa33c86d583f80c1085e0b0784879b9e826593eb208ab71b55d323c12"
				}
			],
			"description":"Libidn2 is a free software implementation of IDNA2008, Punycode and TR46.\nIts purpose is to encode and decode internationalized domain names.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libidn2@2.3.7-1.oe2409?arch=aarch64&epoch=0&upstream=libidn2-2.3.7-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/libidn/#libidn2",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU IDN Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.3.7-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-be8fb668-da5d-4337-913e-f4f7cbc39bba",
			"name":"libstdc++",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e5b9ad5cd37731d9a30e5e617d61dfe47bdab86310fee1fe3d09dd7d3240f407"
				}
			],
			"description":"The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libstdc++@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU Standard C++ Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libtasn1-4.19.0-8f46f894-50ad-4dec-80f3-e51d1554a397-0c416cc2-836c-42c2-bb33-d53c76da67b2",
			"name":"libtasn1",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"92baf74d0ab8f42f5a32be9dd6c4bb91f1c167c3b3bab9147932d001d0258617"
				}
			],
			"description":"Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages.\nThe goal of this implementation is to be highly portable, and only require an\nANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1,\nas specified by the X.680 ITU-T recommendation) parsing and structures management,\nand Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libtasn1@4.19.0-1.oe2409?arch=aarch64&epoch=0&upstream=libtasn1-4.19.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/libtasn1/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libtasn1 is a ASN.1 parsing library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.19.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libunistring-1.1-c4f31a12-2aef-4d50-a8bb-2d2cfc5eae3e-5d7a83ac-6e26-4ccf-964f-cbf85977fb4a",
			"name":"libunistring",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"46137bde6632da774ec5af3ed56ed82bd602e08404863d7f40ca4e2654daa171"
				}
			],
			"description":"Libunistring is a library that provides functions for manipulating Unicode strings\nand for manipulating C strings according to the Unicode standard.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libunistring@1.1-2.oe2409?arch=aarch64&epoch=0&upstream=libunistring-1.1-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/libunistring/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU Unicode string library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.1-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-nettle-3.8.1-eec2cdc6-8436-4f42-b5a7-872761775e1e-f42f3c04-f2d1-4819-92ae-cf39911806d0",
			"name":"nettle",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2c589b03786dd2cbab8dd084545b0e71eec93333a3d336f87b82f6559073729b"
				}
			],
			"description":"Nettle is a cryptographic library designed to fit any context:\nin crypto toolkits for object-oriented languages, in applications\nlike LSH or GnuPG, or even in kernel space.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/nettle@3.8.1-1.oe2409?arch=aarch64&epoch=0&upstream=nettle-3.8.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.lysator.liu.se/~nisse/nettle/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A low-level cryptographic library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.8.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-p11-kit-0.25.5-d832cfe2-32b4-4338-bb48-5ddd35e07bd8-e80c2d1f-8b09-44bb-b532-fe394ee1fdef",
			"name":"p11-kit",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2b6c6e7291f6f7102ee280aec8351f3030f74bbf1c0b3514e9c1f780d79a4e9c"
				}
			],
			"description":"Provides a way to load and enumerate PKCS#11 modules.\nProvides a standard configuration setup for installing\nPKCS#11 modules in such a way that they're discoverable.\nAlso solves problems with coordinating the use of PKCS#11\nby different components or libraries living in the same process.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/p11-kit@0.25.5-1.oe2409?arch=aarch64&epoch=0&upstream=p11-kit-0.25.5-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://p11-glue.freedesktop.org/p11-kit.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Provides a way to load and enumerate PKCS#11 modules.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.25.5-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-p11-kit-trust-0.25.5-61d72809-4ab8-4528-9762-b92449fe1956-bd7d09aa-6c73-40c0-a26d-2df286cec4a1",
			"name":"p11-kit-trust",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"3dfe8374ebbd0d60c5af4efa49d5d327f571ca4cc075ba72c879acbb40edd80d"
				}
			],
			"description":"This package contains PKCS#11 trust policy module.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/p11-kit-trust@0.25.5-1.oe2409?arch=aarch64&epoch=0&upstream=p11-kit-0.25.5-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://p11-glue.freedesktop.org/p11-kit.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Trust policy module of p11-kit",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.25.5-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-ef2e4718-06b8-41ab-8c35-f0b82c644f42",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-crypto-policies-20230614-b23a152d-aecb-42e0-81d0-c86ed8aabde7-c86da162-74b0-4201-be10-3e8a2de65bdb"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-bccfa124-55a3-4a7e-9df5-2a8085609e24"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gmp-6.3.0-86b13f91-2fb9-4644-bb8d-72f6ad2cfed1-f0fe986c-f2b1-4dd5-b4b7-68b71184dc21"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-fd3e0a68-ed8d-43d8-9a15-cd343a1d2cb9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libidn2-2.3.7-20589ce2-5bf7-49ad-a995-ad2568745666-a6265a5a-7414-4bfc-aee0-b2a94df08452"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-be8fb668-da5d-4337-913e-f4f7cbc39bba"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libtasn1-4.19.0-8f46f894-50ad-4dec-80f3-e51d1554a397-0c416cc2-836c-42c2-bb33-d53c76da67b2"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libunistring-1.1-c4f31a12-2aef-4d50-a8bb-2d2cfc5eae3e-5d7a83ac-6e26-4ccf-964f-cbf85977fb4a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-nettle-3.8.1-eec2cdc6-8436-4f42-b5a7-872761775e1e-f42f3c04-f2d1-4819-92ae-cf39911806d0"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-p11-kit-0.25.5-d832cfe2-32b4-4338-bb48-5ddd35e07bd8-e80c2d1f-8b09-44bb-b532-fe394ee1fdef"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-p11-kit-trust-0.25.5-61d72809-4ab8-4528-9762-b92449fe1956-bd7d09aa-6c73-40c0-a26d-2df286cec4a1"
		},
		{
			"spdxElementId":"SPDXRef-rpm-gnutls-3.8.2-9865468d-1ce0-42c1-a379-209ca3a9d6ca",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-ef2e4718-06b8-41ab-8c35-f0b82c644f42"
		}
	]
}