{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"lxsession-0.0.5.5-6.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/lxsession-0.0.5.5-6.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-0207df01-0828-4a8a-b3bb-ad832bcc3736",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-cairo-1.18.0-ee1cde24-4046-4ea9-a207-de957623ea90-308f1848-5b08-4293-b832-848772b883c8",
			"name":"cairo",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"79763657d63de3a9de61eb532aca764cfad0ac96bdf5e9109d558c4ba15c4f1c"
				}
			],
			"description":"Cairo is a 2D graphics libarary with support for multiple output devices.\nIt provides high-quality display and print output and this package also\ncontains functionality to make cairo graphics library integrate well with\nGObject used by GNOME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cairo@1.18.0-1.oe2409?arch=aarch64&epoch=0&upstream=cairo-1.18.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://cairographics.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A 2D graphics library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.18.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-cf01c47b-adcf-4798-adfd-c702148c3322",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gdk-pixbuf2-2.42.10-be348901-a8d5-4a8e-b87d-ccae6f7b85ab-507d37a8-e214-4711-be7e-86b3704d5007",
			"name":"gdk-pixbuf2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"1628aee3a1b47ecdac1b95510d5bd8b778b348476404dd504d754ee5a0d4eba1"
				}
			],
			"description":"gdk is written in C but has been designed from the ground up to support a wide range of languages.\nIt provide a complete set of widgets,and suitable for projects ranging from small one-off\ntools to complete application suites.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gdk-pixbuf2@2.42.10-2.oe2409?arch=aarch64&epoch=0&upstream=gdk-pixbuf2-2.42.10-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gitlab.gnome.org/GNOME/gdk-pixbuf",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"gdk is a multi-platform toolkit for creating graphical user interfaces.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.42.10-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-58c360b7-597c-42b5-93b0-7099c2bac816",
			"name":"glib2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2ca1b4eb1b91d00c37ad7eecfb820458783feb461d03419da5db1095bec4a48d"
				}
			],
			"description":"GLib is a bundle of three (formerly five) low-level system libraries\nwritten in C and developed mainly by GNOME. GLib's code was separated\nfrom GTK, so it can be used by software other than GNOME and has been\ndeveloped in parallel ever since.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glib2@2.78.6-1.oe2409?arch=aarch64&epoch=0&upstream=glib2-2.78.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The core library that forms the basis for projects such as GTK+ and GNOME",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.78.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-3e2bcf32-a44d-45fe-934c-84688e379748",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gtk2-2.24.33-b462d549-dc41-4785-9f3d-deee560f188d-283f5704-8022-41cd-8736-81fdb2821c81",
			"name":"gtk2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"ac988f8fcdf660c4c55cd3d2ff20f8aa82d938df9bc4202bbd5e27d35624a103"
				}
			],
			"description":"GTK+ is a library for creating graphical user interfaces. The library\nis created in C programming language. The GTK+ is also called the GIMP\nToolkit. Originally, the library was created while developing the GIMP\nimage manipulation program.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gtk2@2.24.33-10.oe2409?arch=aarch64&epoch=0&upstream=gtk2-2.24.33-10.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gtk.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GTK+ graphical user interface library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.24.33-10.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libX11-1.8.7-780d1bda-8f9a-4faf-b959-a8f73926d5a4-4458c932-2c41-4149-a3df-cf7dcc6d02fd",
			"name":"libX11",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"cc1887bb9f8937fd895654f421bf39eb4d286c616b2b54fc95936a04b77c645d"
				}
			],
			"description":"Core X11 protocol client library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libX11@1.8.7-2.oe2409?arch=aarch64&epoch=0&upstream=libX11-1.8.7-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.x.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Core X11 protocol client library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.8.7-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libnotify-0.8.3-f7ec91f5-5e1c-4555-9b8d-d4c9746f046e-7f0d18ef-e8ed-4c9a-9eaf-0709c2bc4c4d",
			"name":"libnotify",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"404e4d435c3229ee5c667614de4d560742ee7d31d16bdc1c575fc4df4147ecf2"
				}
			],
			"description":"libnotify is a library for sending desktop notifications to a notification\ndaemon. These notifications can be used to inform the user about an event\nor display some form of information without getting in the user's way.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libnotify@0.8.3-1.oe2409?arch=aarch64&epoch=0&upstream=libnotify-0.8.3-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gitlab.gnome.org/GNOME/libnotify",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Notification library on desktop",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.8.3-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-upower-1.90.2-8987190c-a410-429b-9215-0b20db82f9d5-68935248-5824-4ec8-98a2-a3073b367606",
			"name":"upower",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"08b9df0664ee9d76063c8acfd6003cc140f1137814a02bba0fb1030c6481511c"
				}
			],
			"description":"UPower is an abstraction for enumerating power devices, listening to\ndevice events and querying history and statistics. Any application or\nservice on the system can access the org.freedesktop.UPower service\nvia the system message bus. Some operations (such as suspending the\nsystem) are restricted using PolicyKit.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/upower@1.90.2-1.oe2409?arch=aarch64&epoch=0&upstream=upower-1.90.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://upower.freedesktop.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Power Management Service",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.90.2-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-lxsession-0.5.5-84cffc2a-5fd3-473a-ac53-f9f51190b847",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-0207df01-0828-4a8a-b3bb-ad832bcc3736"
		},
		{
			"spdxElementId":"SPDXRef-rpm-lxsession-0.5.5-84cffc2a-5fd3-473a-ac53-f9f51190b847",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cairo-1.18.0-ee1cde24-4046-4ea9-a207-de957623ea90-308f1848-5b08-4293-b832-848772b883c8"
		},
		{
			"spdxElementId":"SPDXRef-rpm-lxsession-0.5.5-84cffc2a-5fd3-473a-ac53-f9f51190b847",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-cf01c47b-adcf-4798-adfd-c702148c3322"
		},
		{
			"spdxElementId":"SPDXRef-rpm-lxsession-0.5.5-84cffc2a-5fd3-473a-ac53-f9f51190b847",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gdk-pixbuf2-2.42.10-be348901-a8d5-4a8e-b87d-ccae6f7b85ab-507d37a8-e214-4711-be7e-86b3704d5007"
		},
		{
			"spdxElementId":"SPDXRef-rpm-lxsession-0.5.5-84cffc2a-5fd3-473a-ac53-f9f51190b847",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glib2-2.78.6-69d29052-ad04-4724-9cba-6db9a47aa26a-58c360b7-597c-42b5-93b0-7099c2bac816"
		},
		{
			"spdxElementId":"SPDXRef-rpm-lxsession-0.5.5-84cffc2a-5fd3-473a-ac53-f9f51190b847",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-3e2bcf32-a44d-45fe-934c-84688e379748"
		},
		{
			"spdxElementId":"SPDXRef-rpm-lxsession-0.5.5-84cffc2a-5fd3-473a-ac53-f9f51190b847",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gtk2-2.24.33-b462d549-dc41-4785-9f3d-deee560f188d-283f5704-8022-41cd-8736-81fdb2821c81"
		},
		{
			"spdxElementId":"SPDXRef-rpm-lxsession-0.5.5-84cffc2a-5fd3-473a-ac53-f9f51190b847",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libX11-1.8.7-780d1bda-8f9a-4faf-b959-a8f73926d5a4-4458c932-2c41-4149-a3df-cf7dcc6d02fd"
		},
		{
			"spdxElementId":"SPDXRef-rpm-lxsession-0.5.5-84cffc2a-5fd3-473a-ac53-f9f51190b847",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libnotify-0.8.3-f7ec91f5-5e1c-4555-9b8d-d4c9746f046e-7f0d18ef-e8ed-4c9a-9eaf-0709c2bc4c4d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-lxsession-0.5.5-84cffc2a-5fd3-473a-ac53-f9f51190b847",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-upower-1.90.2-8987190c-a410-429b-9215-0b20db82f9d5-68935248-5824-4ec8-98a2-a3073b367606"
		}
	]
}