{ "SPDXID":"SPDXRef-DOCUMENT", "name":"libxmlb-0.0.3.14-1.oe2409.aarch64.rpm", "spdxVersion":"SPDX-2.2", "creationInfo":{ "created":"2024-09-30T03:30:07.5589037Z", "creators":"[openeuler_creator]" }, "dataLicense":"CC0-1.0", "documentNamespace":"https://repo.openeuler.org/security/data/sbom/libxmlb-0.0.3.14-1.oe2409.aarch64.rpm", "packages":[ { "SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-8344a4a9-94ee-408b-aea2-b6fc2501ffdc", "name":"glib2", "checksums":[ { "algorithm":"SHA256", "checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d" } ], "description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://www.gtk.org", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"The core library that forms the basis for projects such as GTK+ and GNOME", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.78.6-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-939f2d79-fda0-43e5-8098-555102f724ae", "name":"glibc", "checksums":[ { "algorithm":"SHA256", "checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98" } ], "description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://www.gnu.org/software/glibc/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"The GNU libc libraries", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.38-34.oe2409" }, { "SPDXID":"SPDXRef-rpm-shared-mime-info-2.4-27d0bada-1da3-4067-86b6-c34433583a77-e2569419-45c9-4548-8e99-ddadd6acf458", "name":"shared-mime-info", "checksums":[ { "algorithm":"SHA256", "checksumValue":"b5d4f1daf2cf8e8cb2649f16b7750e1c86c838e1510e0da549b4f68b4cdfe434" } ], "description":"The shared-mime-info package contains the core database of common types\nand the update-mime-database command used to extend it. It requires\nglib2 to be installed for building the update command. Additionally, it\nuses intltool for translations, though this is only a dependency for\nthe maintainers.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/shared-mime-info@2.4-1.oe2409?arch=aarch64&epoch=0&upstream=shared-mime-info-2.4-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://freedesktop.org/wiki/Software/shared-mime-info/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Shared MIME information database", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.4-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-xz-libs-5.4.7-a79095d8-0f59-449e-a42d-ac4d1d3c3eb6-d32e3e03-0ca1-4e13-986a-6a904a413b96", "name":"xz-libs", "checksums":[ { "algorithm":"SHA256", "checksumValue":"f7a2c343af7207883ee704e8002bcaa6df0cbc361434df9eb01085f88657a93f" } ], "description":"Libraries for decoding files compressed with LZMA or XZ utils.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/xz-libs@5.4.7-1.oe2409?arch=aarch64&epoch=0&upstream=xz-5.4.7-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://tukaani.org/xz", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Libraries for xz", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:5.4.7-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-zstd-1.5.6-ed7278c4-9e21-4ba3-925a-3b13d7a65d08-7d9808c3-facc-4b09-8b2f-90285f7be9e2", "name":"zstd", "checksums":[ { "algorithm":"SHA256", "checksumValue":"540889791e83a2032aa07967ce6d2791f3353208081a165a351dd65208d2bb9d" } ], "description":"Zstd is a fast lossless compression algorithm. It's backed by a very fast entropy stage,\nprovided by Huff0 and FSE library. It's a real-time compression scenario for zlib levels\nand has a better compression ratio.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/zstd@1.5.6-1.oe2409?arch=aarch64&epoch=0&upstream=zstd-1.5.6-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/facebook/zstd", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A fast lossless compression algorithm", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.5.6-1.oe2409" } ], "relationships":[ { "spdxElementId":"SPDXRef-rpm-libxmlb-0.3.14-8be66f5f-bb00-4358-9e7d-1136154ae195", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-8344a4a9-94ee-408b-aea2-b6fc2501ffdc" }, { "spdxElementId":"SPDXRef-rpm-libxmlb-0.3.14-8be66f5f-bb00-4358-9e7d-1136154ae195", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-939f2d79-fda0-43e5-8098-555102f724ae" }, { "spdxElementId":"SPDXRef-rpm-libxmlb-0.3.14-8be66f5f-bb00-4358-9e7d-1136154ae195", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-shared-mime-info-2.4-27d0bada-1da3-4067-86b6-c34433583a77-e2569419-45c9-4548-8e99-ddadd6acf458" }, { "spdxElementId":"SPDXRef-rpm-libxmlb-0.3.14-8be66f5f-bb00-4358-9e7d-1136154ae195", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-xz-libs-5.4.7-a79095d8-0f59-449e-a42d-ac4d1d3c3eb6-d32e3e03-0ca1-4e13-986a-6a904a413b96" }, { "spdxElementId":"SPDXRef-rpm-libxmlb-0.3.14-8be66f5f-bb00-4358-9e7d-1136154ae195", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-zstd-1.5.6-ed7278c4-9e21-4ba3-925a-3b13d7a65d08-7d9808c3-facc-4b09-8b2f-90285f7be9e2" } ] }