{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"libsolv-0.0.7.24-4.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/libsolv-0.0.7.24-4.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bzip2-1.0.8-5dc62b0f-a874-40a6-a309-f6de98a638c2-a1d1b3f1-3ee1-42a6-8df5-7ae9cf6c1c00",
			"name":"bzip2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"01489c08d9921a6c60c57c90b84c8d11fc02c1860f45c6f009bf535704baa64c"
				}
			],
			"description":"bzip2 is a freely available, patent free, high-quality data compressor.\nIt typically compresses files to within 10% to 15% of the best available\ntechniques (the PPM family of statistical compressors), whilst being\naround twice as fast at compression and six times faster at decompression.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bzip2@1.0.8-8.oe2409?arch=aarch64&epoch=0&upstream=bzip2-1.0.8-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.sourceware.org/bzip2/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A high-quality data compressor",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.0.8-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-c4ca442e-f73c-4cf1-bdf3-12d676e75c13",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxml2-2.12.6-0c08664b-ea3e-43dc-8239-d814370a1088-2a875486-cb18-4096-b5f0-3c3b574029b4",
			"name":"libxml2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"47e299fcb5cdfb5396dfb3180cf7878e71646a2e7eeca258bf0875f8d96c00dd"
				}
			],
			"description":"This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxml2@2.12.6-3.oe2409?arch=aarch64&epoch=0&upstream=libxml2-2.12.6-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://xmlsoft.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library providing XML and HTML support",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.12.6-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-rpm-4.18.2-7b096ca1-9ef8-49f0-8a89-231470502d33-1ed440ae-c581-46d2-873e-94c9b2e8547b",
			"name":"rpm",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c93dca3486cfb3dc0a06a7aab93c1a3388ef7048f38567e937a070fa49a7e44d"
				}
			],
			"description":"The RPM Package Manager (RPM) is a powerful package management system capability as below\n\n-building computer software from source into easily distributable packages\n-installing, updating and uninstalling packaged software\n-querying detailed information about the packaged software, whether installed or not\n-verifying integrity of packaged software and resulting software installation",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/rpm@4.18.2-15.oe2409?arch=aarch64&epoch=0&upstream=rpm-4.18.2-15.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.rpm.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"RPM Package Manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.18.2-15.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-rpm-libs-4.18.2-cb094e19-2355-445e-92af-94aa6ef23ed2-aa500b14-a5d9-4807-b1bb-3c7b371533c1",
			"name":"rpm-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"efa1910d5b244951efa6deb3b9e5fb86d6e0879a44f57263cb8abad733687b43"
				}
			],
			"description":"Shared library of rpm 4.18.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/rpm-libs@4.18.2-15.oe2409?arch=aarch64&epoch=0&upstream=rpm-4.18.2-15.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.rpm.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Shared library of rpm 4.18",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.18.2-15.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xz-libs-5.4.7-a79095d8-0f59-449e-a42d-ac4d1d3c3eb6-446b9146-0ae4-4122-8d2e-90222a5908f5",
			"name":"xz-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f7a2c343af7207883ee704e8002bcaa6df0cbc361434df9eb01085f88657a93f"
				}
			],
			"description":"Libraries for decoding files compressed with LZMA or XZ utils.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xz-libs@5.4.7-1.oe2409?arch=aarch64&epoch=0&upstream=xz-5.4.7-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://tukaani.org/xz",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libraries for xz",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.4.7-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-67042f55-a978-406d-b0b7-4f7aa4f5e9f8",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zstd-1.5.6-ed7278c4-9e21-4ba3-925a-3b13d7a65d08-0c028b9f-7fca-4f92-9216-da4d2bb51e24",
			"name":"zstd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"540889791e83a2032aa07967ce6d2791f3353208081a165a351dd65208d2bb9d"
				}
			],
			"description":"Zstd is a fast lossless compression algorithm. It's backed by a very fast entropy stage,\nprovided by Huff0 and FSE library. It's a real-time compression scenario for zlib levels\nand has a better compression ratio.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zstd@1.5.6-1.oe2409?arch=aarch64&epoch=0&upstream=zstd-1.5.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/facebook/zstd",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A fast lossless compression algorithm",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.5.6-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-libsolv-0.7.24-9f72506f-f235-4b9f-aa02-1b9c53c443f7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bzip2-1.0.8-5dc62b0f-a874-40a6-a309-f6de98a638c2-a1d1b3f1-3ee1-42a6-8df5-7ae9cf6c1c00"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libsolv-0.7.24-9f72506f-f235-4b9f-aa02-1b9c53c443f7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-c4ca442e-f73c-4cf1-bdf3-12d676e75c13"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libsolv-0.7.24-9f72506f-f235-4b9f-aa02-1b9c53c443f7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxml2-2.12.6-0c08664b-ea3e-43dc-8239-d814370a1088-2a875486-cb18-4096-b5f0-3c3b574029b4"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libsolv-0.7.24-9f72506f-f235-4b9f-aa02-1b9c53c443f7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-rpm-4.18.2-7b096ca1-9ef8-49f0-8a89-231470502d33-1ed440ae-c581-46d2-873e-94c9b2e8547b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libsolv-0.7.24-9f72506f-f235-4b9f-aa02-1b9c53c443f7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-rpm-libs-4.18.2-cb094e19-2355-445e-92af-94aa6ef23ed2-aa500b14-a5d9-4807-b1bb-3c7b371533c1"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libsolv-0.7.24-9f72506f-f235-4b9f-aa02-1b9c53c443f7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xz-libs-5.4.7-a79095d8-0f59-449e-a42d-ac4d1d3c3eb6-446b9146-0ae4-4122-8d2e-90222a5908f5"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libsolv-0.7.24-9f72506f-f235-4b9f-aa02-1b9c53c443f7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-67042f55-a978-406d-b0b7-4f7aa4f5e9f8"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libsolv-0.7.24-9f72506f-f235-4b9f-aa02-1b9c53c443f7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zstd-1.5.6-ed7278c4-9e21-4ba3-925a-3b13d7a65d08-0c028b9f-7fca-4f92-9216-da4d2bb51e24"
		}
	]
}