{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"haproxy-0.2.9.9-2.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/haproxy-0.2.9.9-2.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-3d4c62b7-f5d2-474a-ae13-40c61c622483",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-07da262e-1c27-4adf-90f2-d218fe76692e",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-e5f01963-374d-49cb-8504-c935a741d4b9",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxcrypt-4.4.36-fcdbfeb7-9762-4a82-ba03-6bad05eddcad-6abae383-1c3f-46cb-a66e-8b975958809b",
			"name":"libxcrypt",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2d3d32dd99e7e6cdc72d73e089dfe22f2b047519bdba4bf73561f998fcaeed3b"
				}
			],
			"description":"libxcrypt is a modern library for one-way hashing of passwords.\nIt supports a wide variety of both modern and historical hashing\nmethods: yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt,\nsha256crypt, md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt,\nand descrypt. It provides the traditional Unix crypt and crypt_r\ninterfaces, as well as a set of extended interfaces pioneered by\nOpenwall Linux, crypt_rn, crypt_ra, crypt_gensalt, crypt_gensalt_rn,\nand crypt_gensalt_ra.\nlibxcrypt is intended to be used by login(1), passwd(1), and other\nsimilar programs; that is, to hash a small number of passwords during\nan interactive authentication dialogue with a human. It is not suitable\nfor use in bulk password-cracking applications, or in any other situation\nwhere speed is more important than careful handling of sensitive data.\nHowever, it is intended to be fast and lightweight enough for use in\nservers that must field thousands of login attempts per minute.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxcrypt@4.4.36-2.oe2409?arch=aarch64&epoch=0&upstream=libxcrypt-4.4.36-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/besser82/libxcrypt",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Extended crypt library for DES, MD5, Blowfish and others",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.4.36-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-lua-5.4.6-8f8d70cd-11c8-4bda-904e-8d6795593308-f2a62495-2791-4843-b3ab-9c67117413ec",
			"name":"lua",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e783e5841cb4a3d0fb6b2cda62d266daf2ed8c91aae70a98d53e69f3f1b4930c"
				}
			],
			"description":"Lua is a powerful, efficient, lightweight, embeddable scripting language.\nIt supports procedural programming, object-oriented programming,\nfunctional programming, data-driven programming, and data description.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/lua@5.4.6-1.oe2409?arch=aarch64&epoch=0&upstream=lua-5.4.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.lua.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A powerful, efficient, lightweight, embeddable scripting language",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.4.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-c8e27e0e-f1f2-41c4-9e80-5b4a85400414",
			"name":"openssl-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fe8a21dc03d6c950264c4aa621ea0c4145da06ac2541c987a442ec2c8af13cfe"
				}
			],
			"description":"The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/openssl-libs@3.0.12-8.oe2409?arch=aarch64&epoch=1&upstream=openssl-3.0.12-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.openssl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A general purpose cryptography library with TLS implementation",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:3.0.12-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-pcre2-10.42-90b15ffe-b336-4085-8114-08d343102ad7-fd051507-1cda-418b-9276-bf1a8678dede",
			"name":"pcre2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"63b16a0eebb21b4266321ddd621236057efc7045b85cfe771148d2629b89eb8d"
				}
			],
			"description":"PCRE2 is a re-working of the original PCRE1 library to provide an entirely new\nAPI. Since its initial release in 2015, there has been further development of\nthe code and it now differs from PCRE1 in more than just the API.\nPCRE2 is written in C, and it has its own API. There are three sets of\nfunctions, one for the 8-bit library, which processes strings of bytes, one for\nthe 16-bit library, which processes strings of 16-bit values, and one for the\n32-bit library, which processes strings of 32-bit values. Unlike PCRE1, there\nare no C++ wrappers.\n\nThe distribution does contain a set of C wrapper functions for the 8-bit\nlibrary that are based on the POSIX regular expression API (see the pcre2posix\nman page). These are built into a library called libpcre2-posix. Note that this\njust provides a POSIX calling interface to PCRE2; the regular expressions\nthemselves still follow Perl syntax and semantics. The POSIX API is restricted,\nand does not give full access to all of PCRE2's facilities.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/pcre2@10.42-9.oe2409?arch=aarch64&epoch=0&upstream=pcre2-10.42-9.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.pcre.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Perl Compatible Regular Expressions",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:10.42-9.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b-bc1020e9-465a-4471-8686-2045066e6151",
			"name":"shadow",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0b4e5e30e7e79208c364dc951155b341b6353207412480e6adf95f89d270d9a9"
				}
			],
			"description":"This package includes the necessary programs for converting plain\npassword files to the shadow password format and to manage user and\ngroup accounts.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/shadow@4.14.3-4.oe2409?arch=aarch64&epoch=2&upstream=shadow-4.14.3-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://pkg-shadow.alioth.debian.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Tools for managing accounts and shadow password files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:4.14.3-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-5663e80d-0bfc-4d2f-99b9-6825c16d9900",
			"name":"systemd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fbb6e242b644b0ba4ff5b0dd58e82c338e85dc72f01211275506496049450fb5"
				}
			],
			"description":"systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"System and Service Manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-f6efb256-1354-4833-9b77-7167a8ca6150",
			"name":"systemd-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"26a509cd7fd1c13add8f97aa5ae9df983a62258b3cb32e08e0b2732ae39e3b9d"
				}
			],
			"description":"Libraries for systemd and udev.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd-libs@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"systemd libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-haproxy-2.9.9-bb43c0b8-67db-4d69-beea-956ca607854b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-3d4c62b7-f5d2-474a-ae13-40c61c622483"
		},
		{
			"spdxElementId":"SPDXRef-rpm-haproxy-2.9.9-bb43c0b8-67db-4d69-beea-956ca607854b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-07da262e-1c27-4adf-90f2-d218fe76692e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-haproxy-2.9.9-bb43c0b8-67db-4d69-beea-956ca607854b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-e5f01963-374d-49cb-8504-c935a741d4b9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-haproxy-2.9.9-bb43c0b8-67db-4d69-beea-956ca607854b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxcrypt-4.4.36-fcdbfeb7-9762-4a82-ba03-6bad05eddcad-6abae383-1c3f-46cb-a66e-8b975958809b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-haproxy-2.9.9-bb43c0b8-67db-4d69-beea-956ca607854b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-lua-5.4.6-8f8d70cd-11c8-4bda-904e-8d6795593308-f2a62495-2791-4843-b3ab-9c67117413ec"
		},
		{
			"spdxElementId":"SPDXRef-rpm-haproxy-2.9.9-bb43c0b8-67db-4d69-beea-956ca607854b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-c8e27e0e-f1f2-41c4-9e80-5b4a85400414"
		},
		{
			"spdxElementId":"SPDXRef-rpm-haproxy-2.9.9-bb43c0b8-67db-4d69-beea-956ca607854b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-pcre2-10.42-90b15ffe-b336-4085-8114-08d343102ad7-fd051507-1cda-418b-9276-bf1a8678dede"
		},
		{
			"spdxElementId":"SPDXRef-rpm-haproxy-2.9.9-bb43c0b8-67db-4d69-beea-956ca607854b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b-bc1020e9-465a-4471-8686-2045066e6151"
		},
		{
			"spdxElementId":"SPDXRef-rpm-haproxy-2.9.9-bb43c0b8-67db-4d69-beea-956ca607854b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-5663e80d-0bfc-4d2f-99b9-6825c16d9900"
		},
		{
			"spdxElementId":"SPDXRef-rpm-haproxy-2.9.9-bb43c0b8-67db-4d69-beea-956ca607854b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-libs-255-0f94b6e4-1409-42bc-8b52-daf313439a66-f6efb256-1354-4833-9b77-7167a8ca6150"
		}
	]
}