{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"mariadb-embedded-4.10.5.25-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/mariadb-embedded-4.10.5.25-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-e8cfe4e2-7d0a-4240-adb9-8660fe079f3c",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libaio-0.3.113-c88d16bc-6371-4312-8b69-d6e9e38c3dfc-0d1858ad-78c7-4ac7-83dc-85a35e3a037e",
			"name":"libaio",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b37e9db4b5ed0e6e4f6d80557487710dfe717309a16290a692ad3e33b9d40098"
				}
			],
			"description":"The Linux-native asynchronous I/O facility (\"async I/O\", or \"aio\") has a\nricher API and capability set than the simple POSIX async I/O facility.\nThis library, libaio, provides the Linux-native API for async I/O.\nThe POSIX async I/O facility requires this library in order to provide\nkernel-accelerated async I/O capabilities, as do applications which\nrequire the Linux-native async I/O API.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libaio@0.3.113-9.oe2409?arch=aarch64&epoch=0&upstream=libaio-0.3.113-9.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://pagure.io/libaio",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Linux-native asynchronous I/O access library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.3.113-9.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-a87e2c31-bd6f-4168-83d0-ffc31dcdec8c",
			"name":"libstdc++",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e5b9ad5cd37731d9a30e5e617d61dfe47bdab86310fee1fe3d09dd7d3240f407"
				}
			],
			"description":"The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libstdc++@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU Standard C++ Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxcrypt-4.4.36-fcdbfeb7-9762-4a82-ba03-6bad05eddcad-04d87ee8-b086-4146-817c-50209f4e43eb",
			"name":"libxcrypt",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2d3d32dd99e7e6cdc72d73e089dfe22f2b047519bdba4bf73561f998fcaeed3b"
				}
			],
			"description":"libxcrypt is a modern library for one-way hashing of passwords.\nIt supports a wide variety of both modern and historical hashing\nmethods: yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt,\nsha256crypt, md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt,\nand descrypt. It provides the traditional Unix crypt and crypt_r\ninterfaces, as well as a set of extended interfaces pioneered by\nOpenwall Linux, crypt_rn, crypt_ra, crypt_gensalt, crypt_gensalt_rn,\nand crypt_gensalt_ra.\nlibxcrypt is intended to be used by login(1), passwd(1), and other\nsimilar programs; that is, to hash a small number of passwords during\nan interactive authentication dialogue with a human. It is not suitable\nfor use in bulk password-cracking applications, or in any other situation\nwhere speed is more important than careful handling of sensitive data.\nHowever, it is intended to be fast and lightweight enough for use in\nservers that must field thousands of login attempts per minute.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxcrypt@4.4.36-2.oe2409?arch=aarch64&epoch=0&upstream=libxcrypt-4.4.36-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/besser82/libxcrypt",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Extended crypt library for DES, MD5, Blowfish and others",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.4.36-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-lz4-1.10.0-904beed5-b6cc-4173-a807-04f8c7152e00-0a9a044d-85b9-41d6-81cf-cf8452df693d",
			"name":"lz4",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"41eb5ae9f53383efd2357f3234c28e68b5045ab5b7d63d32e1966b5f67435bcb"
				}
			],
			"description":"LZ4 is lossless compression algorithm, providing compression speed > 500 MB/s per\ncore (>0.15 Bytes/cycle). It features an extremely fast decoder, with speed in\nmultiple GB/s per core (~1 Byte/cycle). A high compression derivative, called\nLZ4_HC, is available, trading customizable CPU time for compression ratio.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/lz4@1.10.0-1.oe2409?arch=aarch64&epoch=0&upstream=lz4-1.10.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://lz4.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Extremely fast compression algorithm",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.10.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-mariadb-common-10.5.25-b034fca0-f616-4e26-9621-3ede52c0b65d-b3c9ea02-35b6-4859-bb25-638105c35137",
			"name":"mariadb-common",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"9ddf48638c1537eeccbb69d44cf9389d4ef85d66a73d6e4dfda08f9f0c4e5b0a"
				}
			],
			"description":"The package provides the essential shared files for any MariaDB program.\nYou will need to install this package to use any other MariaDB package.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/mariadb-common@10.5.25-1.oe2409?arch=aarch64&epoch=4&upstream=mariadb-10.5.25-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://mariadb.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The shared files required by server and client",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"4:10.5.25-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-mariadb-errmsg-10.5.25-49571604-b245-4086-a42a-834e3183fad7-10a30407-559d-46c2-801d-a0f92675dd8c",
			"name":"mariadb-errmsg",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"27764f083459e41f426d9adfebae49ba078ec21707cc28af6707403f10e5be38"
				}
			],
			"description":"The package provides error messages files for the MariaDB daemon and the\nembedded server. You will need to install this package to use any of those\nMariaDB packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/mariadb-errmsg@10.5.25-1.oe2409?arch=aarch64&epoch=4&upstream=mariadb-10.5.25-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://mariadb.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The error messages files required by server and embedded",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"4:10.5.25-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-3bddf437-93b4-4656-9d53-6a04af2df3cc",
			"name":"openssl-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fe8a21dc03d6c950264c4aa621ea0c4145da06ac2541c987a442ec2c8af13cfe"
				}
			],
			"description":"The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/openssl-libs@3.0.12-8.oe2409?arch=aarch64&epoch=1&upstream=openssl-3.0.12-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.openssl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A general purpose cryptography library with TLS implementation",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:3.0.12-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-pcre2-10.42-90b15ffe-b336-4085-8114-08d343102ad7-556ea51e-3370-4da0-bf2b-a3ec2877140c",
			"name":"pcre2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"63b16a0eebb21b4266321ddd621236057efc7045b85cfe771148d2629b89eb8d"
				}
			],
			"description":"PCRE2 is a re-working of the original PCRE1 library to provide an entirely new\nAPI. Since its initial release in 2015, there has been further development of\nthe code and it now differs from PCRE1 in more than just the API.\nPCRE2 is written in C, and it has its own API. There are three sets of\nfunctions, one for the 8-bit library, which processes strings of bytes, one for\nthe 16-bit library, which processes strings of 16-bit values, and one for the\n32-bit library, which processes strings of 32-bit values. Unlike PCRE1, there\nare no C++ wrappers.\n\nThe distribution does contain a set of C wrapper functions for the 8-bit\nlibrary that are based on the POSIX regular expression API (see the pcre2posix\nman page). These are built into a library called libpcre2-posix. Note that this\njust provides a POSIX calling interface to PCRE2; the regular expressions\nthemselves still follow Perl syntax and semantics. The POSIX API is restricted,\nand does not give full access to all of PCRE2's facilities.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/pcre2@10.42-9.oe2409?arch=aarch64&epoch=0&upstream=pcre2-10.42-9.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.pcre.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Perl Compatible Regular Expressions",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:10.42-9.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-b26e6b76-55a6-4131-8d61-da637523a49d",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-mariadb-embedded-10.5.25-60cd1955-a3d5-4afa-93c8-8dfe1ac27f72",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-e8cfe4e2-7d0a-4240-adb9-8660fe079f3c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mariadb-embedded-10.5.25-60cd1955-a3d5-4afa-93c8-8dfe1ac27f72",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libaio-0.3.113-c88d16bc-6371-4312-8b69-d6e9e38c3dfc-0d1858ad-78c7-4ac7-83dc-85a35e3a037e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mariadb-embedded-10.5.25-60cd1955-a3d5-4afa-93c8-8dfe1ac27f72",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-a87e2c31-bd6f-4168-83d0-ffc31dcdec8c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mariadb-embedded-10.5.25-60cd1955-a3d5-4afa-93c8-8dfe1ac27f72",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxcrypt-4.4.36-fcdbfeb7-9762-4a82-ba03-6bad05eddcad-04d87ee8-b086-4146-817c-50209f4e43eb"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mariadb-embedded-10.5.25-60cd1955-a3d5-4afa-93c8-8dfe1ac27f72",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-lz4-1.10.0-904beed5-b6cc-4173-a807-04f8c7152e00-0a9a044d-85b9-41d6-81cf-cf8452df693d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mariadb-embedded-10.5.25-60cd1955-a3d5-4afa-93c8-8dfe1ac27f72",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-mariadb-common-10.5.25-b034fca0-f616-4e26-9621-3ede52c0b65d-b3c9ea02-35b6-4859-bb25-638105c35137"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mariadb-embedded-10.5.25-60cd1955-a3d5-4afa-93c8-8dfe1ac27f72",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-mariadb-errmsg-10.5.25-49571604-b245-4086-a42a-834e3183fad7-10a30407-559d-46c2-801d-a0f92675dd8c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mariadb-embedded-10.5.25-60cd1955-a3d5-4afa-93c8-8dfe1ac27f72",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-3bddf437-93b4-4656-9d53-6a04af2df3cc"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mariadb-embedded-10.5.25-60cd1955-a3d5-4afa-93c8-8dfe1ac27f72",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-pcre2-10.42-90b15ffe-b336-4085-8114-08d343102ad7-556ea51e-3370-4da0-bf2b-a3ec2877140c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mariadb-embedded-10.5.25-60cd1955-a3d5-4afa-93c8-8dfe1ac27f72",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-b26e6b76-55a6-4131-8d61-da637523a49d"
		}
	]
}