{ "SPDXID":"SPDXRef-DOCUMENT", "name":"ruby-0.3.2.2-145.oe2409.aarch64.rpm", "spdxVersion":"SPDX-2.2", "creationInfo":{ "created":"2024-09-30T03:30:07.5589037Z", "creators":"[openeuler_creator]" }, "dataLicense":"CC0-1.0", "documentNamespace":"https://repo.openeuler.org/security/data/sbom/ruby-0.3.2.2-145.oe2409.aarch64.rpm", "packages":[ { "SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-607f65c3-5553-465b-9ca8-6fbd4701c07f", "name":"glibc", "checksums":[ { "algorithm":"SHA256", "checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98" } ], "description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://www.gnu.org/software/glibc/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"The GNU libc libraries", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.38-34.oe2409" }, { "SPDXID":"SPDXRef-rpm-gmp-6.3.0-86b13f91-2fb9-4644-bb8d-72f6ad2cfed1-828a3c5f-1052-438c-8cd5-77b19bc414c0", "name":"gmp", "checksums":[ { "algorithm":"SHA256", "checksumValue":"a1c322fad371cc2048896e9117971e3cd3c6cc8a2a05aa96d0dd72d53637842e" } ], "description":"GMP is a portable library written in C for arbitrary precision arithmetic\non integers, rational numbers, and floating-point numbers. It aims to provide\nthe fastest possible arithmetic for all applications that need higher\nprecision than is directly supported by the basic C types.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/gmp@6.3.0-3.oe2409?arch=aarch64&epoch=1&upstream=gmp-6.3.0-3.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://gmplib.org", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A GNU multiple precision arithmetic library", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:6.3.0-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-libffi-3.4.4-d55d5961-35d4-4f87-a778-2dcc00e8c5ed-84deebcc-1da9-4b98-ab31-d242835d2527", "name":"libffi", "checksums":[ { "algorithm":"SHA256", "checksumValue":"69c610bef8dec2d884b26fd37da6de3eeceba05c8a51aec526ce7756de211974" } ], "description":"Compilers for high level languages generate code that follows certain conventions. These\nconventions are necessary, in part, for separate compilation to work. One such convention\nis the \"calling convention\". The \"calling convention\" is a set of assumptions made by the\ncompiler about where function arguments will be found on entry to a function. A \"calling\nconvention\" also specifies where the return value for a function is found.\n\nSome programs may not know at the time of compilation what arguments are to be passed to a\nfunction. For instance, an interpreter may be told at run-time about the number and types\nof arguments used to call a given function. Libffi can be used in such programs to provide\na bridge from the interpreter program to compiled code.\n\nThe libffi library provides a portable, high level programming interface to various calling\nconventions. This allows a programmer to call any function specified by a call interface\ndescription at run-time.\n\nFFI stands for Foreign Function Interface. A foreign function interface is the popular name\nfor the interface that allows code written in one language to call code written in another\nlanguage. The libffi library really only provides the lowest, machine dependent layer of a\nfully featured foreign function interface. A layer must exist above libffi that handles type\nconversions for values passed between the two languages.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/libffi@3.4.4-3.oe2409?arch=aarch64&epoch=0&upstream=libffi-3.4.4-3.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://sourceware.org/libffi", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A Portable Foreign Function Interface Library", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:3.4.4-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-libxcrypt-4.4.36-fcdbfeb7-9762-4a82-ba03-6bad05eddcad-14c9600e-ac20-4451-96cf-8c2858cc6020", "name":"libxcrypt", "checksums":[ { "algorithm":"SHA256", "checksumValue":"2d3d32dd99e7e6cdc72d73e089dfe22f2b047519bdba4bf73561f998fcaeed3b" } ], "description":"libxcrypt is a modern library for one-way hashing of passwords.\nIt supports a wide variety of both modern and historical hashing\nmethods: yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt,\nsha256crypt, md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt,\nand descrypt. It provides the traditional Unix crypt and crypt_r\ninterfaces, as well as a set of extended interfaces pioneered by\nOpenwall Linux, crypt_rn, crypt_ra, crypt_gensalt, crypt_gensalt_rn,\nand crypt_gensalt_ra.\nlibxcrypt is intended to be used by login(1), passwd(1), and other\nsimilar programs; that is, to hash a small number of passwords during\nan interactive authentication dialogue with a human. It is not suitable\nfor use in bulk password-cracking applications, or in any other situation\nwhere speed is more important than careful handling of sensitive data.\nHowever, it is intended to be fast and lightweight enough for use in\nservers that must field thousands of login attempts per minute.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/libxcrypt@4.4.36-2.oe2409?arch=aarch64&epoch=0&upstream=libxcrypt-4.4.36-2.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/besser82/libxcrypt", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Extended crypt library for DES, MD5, Blowfish and others", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:4.4.36-2.oe2409" }, { "SPDXID":"SPDXRef-rpm-readline-8.2-c626de48-d42a-4afd-b95b-aff139f6c596-8bb016d3-b4b1-4462-8188-99aac7e1b50f", "name":"readline", "checksums":[ { "algorithm":"SHA256", "checksumValue":"62973007f2eb64b68bb26fd1cadff819fd64870a6f6b9d19878e0d14b075052d" } ], "description":"The GNU Readline library provides a set of functions for use by\napplications that allow users to edit command lines as they are\ntyped in. Both Emacs and vi editing modes are available.The Readline\nlibrary includes additional functions to maintain a list of\npreviously-entered command lines, to recall and perhaps reedit those\nlines, and perform csh-like history expansion on previous commands.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/readline@8.2-2.oe2409?arch=aarch64&epoch=0&upstream=readline-8.2-2.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://tiswww.case.edu/php/chet/readline/rltop.html", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Readline library for editing typed command lines", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:8.2-2.oe2409" }, { "SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-1d1196a1-001d-4241-af01-2bf82cb03502", "name":"zlib", "checksums":[ { "algorithm":"SHA256", "checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db" } ], "description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://www.zlib.net", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A lossless data-compression library", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.2.13-4.oe2409" } ], "relationships":[ { "spdxElementId":"SPDXRef-rpm-ruby-3.2.2-c4e1cb8b-c249-47db-a34c-c194d0a88fe4", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-607f65c3-5553-465b-9ca8-6fbd4701c07f" }, { "spdxElementId":"SPDXRef-rpm-ruby-3.2.2-c4e1cb8b-c249-47db-a34c-c194d0a88fe4", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-gmp-6.3.0-86b13f91-2fb9-4644-bb8d-72f6ad2cfed1-828a3c5f-1052-438c-8cd5-77b19bc414c0" }, { "spdxElementId":"SPDXRef-rpm-ruby-3.2.2-c4e1cb8b-c249-47db-a34c-c194d0a88fe4", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-libffi-3.4.4-d55d5961-35d4-4f87-a778-2dcc00e8c5ed-84deebcc-1da9-4b98-ab31-d242835d2527" }, { "spdxElementId":"SPDXRef-rpm-ruby-3.2.2-c4e1cb8b-c249-47db-a34c-c194d0a88fe4", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-libxcrypt-4.4.36-fcdbfeb7-9762-4a82-ba03-6bad05eddcad-14c9600e-ac20-4451-96cf-8c2858cc6020" }, { "spdxElementId":"SPDXRef-rpm-ruby-3.2.2-c4e1cb8b-c249-47db-a34c-c194d0a88fe4", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-readline-8.2-c626de48-d42a-4afd-b95b-aff139f6c596-8bb016d3-b4b1-4462-8188-99aac7e1b50f" }, { "spdxElementId":"SPDXRef-rpm-ruby-3.2.2-c4e1cb8b-c249-47db-a34c-c194d0a88fe4", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-1d1196a1-001d-4241-af01-2bf82cb03502" } ] }