{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"libcurl-0.8.4.0-10.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/libcurl-0.8.4.0-10.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-brotli-1.1.0-9abf84c6-147a-40e6-b461-e952b686d588-285e539f-ec66-4e45-8abb-204ca74ff925",
			"name":"brotli",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"db1cb96998d25e3d5d26ba2102110d8fd31f01dac41ceb3854055d15f582eba1"
				}
			],
			"description":"Brotli is a generic-purpose lossless compression algorithm that compresses\ndata using a combination of a modern variant of the LZ77 algorithm, Huffman\ncoding and 2nd order context modeling, with a compression ratio comparable\nto the best currently available general-purpose compression methods.\nIt is similar in speed with deflate but offers more dense compression.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/brotli@1.1.0-1.oe2409?arch=aarch64&epoch=0&upstream=brotli-1.1.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/google/brotli",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Lossless compression algorithm",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.1.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-4d31fc45-3d12-4a79-a5fa-4d2825838151",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-krb5-libs-1.21.2-5b5f245d-b846-448c-abe3-a10f98447643-a970685d-1f2c-4305-91e6-27c86ecea077",
			"name":"krb5-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"03db1c6971ffe085ff9115e2917a3c87b1aab8bf136123a5fa3ed575ebb1ff22"
				}
			],
			"description":"This package contains the shared libraries needed by Kerberos 5.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/krb5-libs@1.21.2-8.oe2409?arch=aarch64&epoch=0&upstream=krb5-1.21.2-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://web.mit.edu/kerberos/www/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The non-admin shared libraries used by Kerberos 5",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.21.2-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libidn2-2.3.7-20589ce2-5bf7-49ad-a995-ad2568745666-3569a8f5-e80e-4766-a1fb-38d17df9bd52",
			"name":"libidn2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f0dcd7caa33c86d583f80c1085e0b0784879b9e826593eb208ab71b55d323c12"
				}
			],
			"description":"Libidn2 is a free software implementation of IDNA2008, Punycode and TR46.\nIts purpose is to encode and decode internationalized domain names.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libidn2@2.3.7-1.oe2409?arch=aarch64&epoch=0&upstream=libidn2-2.3.7-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/libidn/#libidn2",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU IDN Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.3.7-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libnghttp2-1.58.0-396ac9c8-972c-4c77-b0ce-968f64c3565e-6d44f8f8-c6b7-41b8-9e5d-4153935d6048",
			"name":"libnghttp2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aee08c7d28fcec8f6a33936f4a6ebb66cbb32de5d8c1249d762e4b40fbbfa9bb"
				}
			],
			"description":"libnghttp2 is a library implementing HTTP/2 protocol in C.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libnghttp2@1.58.0-2.oe2409?arch=aarch64&epoch=0&upstream=nghttp2-1.58.0-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://nghttp2.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"nghttp2 - HTTP/2 C Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.58.0-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libpsl-0.21.2-767d9955-85e5-4aa8-8237-b7767cb64d96-adc1a0ee-2734-44b8-863a-0348bd860ae7",
			"name":"libpsl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c38821d56f514ec54c3d0ad9fc97c32a6aa662a45c9674b5390a64d0835413d7"
				}
			],
			"description":"Libpsl is a C library to handle the Public Suffix List. A Public Suffix List is a\ncollection of Top Level Domains (TLDs) suffixes. Some of the features are listed as\nfollows:\n\n- has built-in PSL data for fast access;\n- allows to load PSL data from files;\n- checks if a given domain is a \"public suffix\";\n- provides immediate cookie domain verification;\n- finds the longest public part of a given domain;\n- finds the shortest private part of a given domain;\n- works with international domains (UTF-8 and IDNA2008 Punycode);\n- is thread-safe;\n- handles IDNA2008 UTS#46 (if libicu is available);",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libpsl@0.21.2-2.oe2409?arch=aarch64&epoch=0&upstream=libpsl-0.21.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/rockdaboot/libpsl",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"C library to handle the Public Suffix List",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.21.2-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libssh-0.10.5-5189bb40-7fa6-490a-b580-7cf7c60db19d-e0074e1f-62fd-4cef-8161-63f8f68736ea",
			"name":"libssh",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"684faf2164b8d72cc53c2a4ab77a8cd1e8f38e6da353a07e39814253dc8b6ab7"
				}
			],
			"description":"The ssh library was designed to be used by programmers needing a working SSH\nimplementation by the mean of a library. The complete control of the client is\nmade by the programmer. With libssh, you can remotely execute programs, transfer\nfiles, use a secure and transparent tunnel for your remote programs. With its\nSecure FTP implementation, you can play with remote files easily, without\nthird-party programs others than libcrypto (from openssl).",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libssh@0.10.5-2.oe2409?arch=aarch64&epoch=0&upstream=libssh-0.10.5-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.libssh.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library implementing the SSH protocol",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.10.5-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-openldap-2.6.5-da754b23-3460-483d-81a6-4b8bc23cb75c-fd1ae911-6829-445a-a34a-b0a432291d1f",
			"name":"openldap",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"786e9f6b2ee5219eda498e64aff857596da73fec0451dff7f9c1d9a859878a93"
				}
			],
			"description":"OpenLDAP is an open source suite of LDAP (Lightweight Directory Access\nProtocol) applications and development tools. LDAP is a set of\nprotocols for accessing directory services (usually phone book style\ninformation, but other information is possible) over the Internet,\nsimilar to the way DNS (Domain Name System) information is propagated\nover the Internet. The openldap package contains configuration files,\nlibraries, and documentation for OpenLDAP.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/openldap@2.6.5-5.oe2409?arch=aarch64&epoch=0&upstream=openldap-2.6.5-5.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.openldap.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"LDAP support libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.6.5-5.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-67563ce8-5a7b-4779-8ff1-029b82cc710b",
			"name":"openssl-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fe8a21dc03d6c950264c4aa621ea0c4145da06ac2541c987a442ec2c8af13cfe"
				}
			],
			"description":"The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/openssl-libs@3.0.12-8.oe2409?arch=aarch64&epoch=1&upstream=openssl-3.0.12-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.openssl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A general purpose cryptography library with TLS implementation",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:3.0.12-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-883ae54a-4de2-43f2-ab3a-643bcf87534b",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-brotli-1.1.0-9abf84c6-147a-40e6-b461-e952b686d588-285e539f-ec66-4e45-8abb-204ca74ff925"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-4d31fc45-3d12-4a79-a5fa-4d2825838151"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-krb5-libs-1.21.2-5b5f245d-b846-448c-abe3-a10f98447643-a970685d-1f2c-4305-91e6-27c86ecea077"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libidn2-2.3.7-20589ce2-5bf7-49ad-a995-ad2568745666-3569a8f5-e80e-4766-a1fb-38d17df9bd52"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libnghttp2-1.58.0-396ac9c8-972c-4c77-b0ce-968f64c3565e-6d44f8f8-c6b7-41b8-9e5d-4153935d6048"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libpsl-0.21.2-767d9955-85e5-4aa8-8237-b7767cb64d96-adc1a0ee-2734-44b8-863a-0348bd860ae7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libssh-0.10.5-5189bb40-7fa6-490a-b580-7cf7c60db19d-e0074e1f-62fd-4cef-8161-63f8f68736ea"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-openldap-2.6.5-da754b23-3460-483d-81a6-4b8bc23cb75c-fd1ae911-6829-445a-a34a-b0a432291d1f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-67563ce8-5a7b-4779-8ff1-029b82cc710b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-883ae54a-4de2-43f2-ab3a-643bcf87534b"
		}
	]
}