{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"kunpengsecl-rac-0.2.0.2-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/kunpengsecl-rac-0.2.0.2-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-0d863e36-99a0-4cd4-90a5-baa39c6be058",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-compat-openssl11-libs-1.1.1m-e88f4659-a1ff-4dd0-bff1-a9b3cac92b4a-df936253-2797-4a5e-a6e9-cfffb8f18f6b",
			"name":"compat-openssl11-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2b74b64794a51e2d95e3ef99d7b2f3465aca2a92264aad44f36453fb097ed5db"
				}
			],
			"description":"The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/compat-openssl11-libs@1.1.1m-11.oe2409?arch=aarch64&epoch=1&upstream=compat-openssl11-1.1.1m-11.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.openssl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A general purpose cryptography library with TLS implementation",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.1.1m-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-c6e0d76c-cccc-42f3-9076-4eb9f68597ce",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-itrustee-sdk-0.1.0-a3b6780c-db52-411d-8bdd-a4ca310bf65b-c77fb2c7-c1cd-44bf-a9c5-411ee79ec299",
			"name":"itrustee_sdk",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"21284e20a0590b4fd22a75939025eb80c9a7d3e8ddd5eabdfdb418fe9c2eb9be"
				}
			],
			"description":"itrustee_sdk is a confidential computing framework for developing TA on itrustee OS",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/itrustee_sdk@0.1.0-13.oe2409?arch=aarch64&epoch=0&upstream=itrustee_sdk-0.1.0-13.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gitee.com/openeuler/itrustee_sdk",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Confidential computing framework for developing TA on itrustee OS",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.1.0-13.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-kunpengsecl-attester-2.0.2-ed48046e-7669-40b4-8a0f-a512ab429ad6-bf87f8c0-c984-41b8-9850-59a8e89d5468",
			"name":"kunpengsecl-attester",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d49d524ac5ae736db29827d561b4b0c8dda8f35b726e7e2074347d654f38c157"
				}
			],
			"description":"This is the attester rpm package, which is used to verify ta reports.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/kunpengsecl-attester@2.0.2-1.oe2409?arch=aarch64&epoch=0&upstream=kunpengsecl-2.0.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gitee.com/openeuler/kunpengsecl",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"the attester package.",
			"supplier":"Organization: leezhenxiang, WangLi, Wucaijun, gwei3",
			"versionInfo":"0:2.0.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-kunpengsecl-qcaserver-2.0.2-c01c310b-1009-497a-ae8b-d9a107b420d0-0331cc53-2c94-4af2-aff2-ee4fa4d9b050",
			"name":"kunpengsecl-qcaserver",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"df2e16e750c87f38ee223eed51ecce10f3991cca14045942384cb01bedd65299"
				}
			],
			"description":"This is the qcaserver rpm package, which is used to invoke libqca.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/kunpengsecl-qcaserver@2.0.2-1.oe2409?arch=aarch64&epoch=0&upstream=kunpengsecl-2.0.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gitee.com/openeuler/kunpengsecl",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"the qcaserver package.",
			"supplier":"Organization: leezhenxiang, WangLi, Wucaijun, gwei3",
			"versionInfo":"0:2.0.2-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-kunpengsecl-rac-2.0.2-bcf7900b-3531-44d6-808b-fc4850cdaa2f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-0d863e36-99a0-4cd4-90a5-baa39c6be058"
		},
		{
			"spdxElementId":"SPDXRef-rpm-kunpengsecl-rac-2.0.2-bcf7900b-3531-44d6-808b-fc4850cdaa2f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-compat-openssl11-libs-1.1.1m-e88f4659-a1ff-4dd0-bff1-a9b3cac92b4a-df936253-2797-4a5e-a6e9-cfffb8f18f6b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-kunpengsecl-rac-2.0.2-bcf7900b-3531-44d6-808b-fc4850cdaa2f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-c6e0d76c-cccc-42f3-9076-4eb9f68597ce"
		},
		{
			"spdxElementId":"SPDXRef-rpm-kunpengsecl-rac-2.0.2-bcf7900b-3531-44d6-808b-fc4850cdaa2f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-itrustee-sdk-0.1.0-a3b6780c-db52-411d-8bdd-a4ca310bf65b-c77fb2c7-c1cd-44bf-a9c5-411ee79ec299"
		},
		{
			"spdxElementId":"SPDXRef-rpm-kunpengsecl-rac-2.0.2-bcf7900b-3531-44d6-808b-fc4850cdaa2f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-kunpengsecl-attester-2.0.2-ed48046e-7669-40b4-8a0f-a512ab429ad6-bf87f8c0-c984-41b8-9850-59a8e89d5468"
		},
		{
			"spdxElementId":"SPDXRef-rpm-kunpengsecl-rac-2.0.2-bcf7900b-3531-44d6-808b-fc4850cdaa2f",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-kunpengsecl-qcaserver-2.0.2-c01c310b-1009-497a-ae8b-d9a107b420d0-0331cc53-2c94-4af2-aff2-ee4fa4d9b050"
		}
	]
}