{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"shadow-2.4.14.3-4.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/shadow-2.4.14.3-4.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-attr-2.5.1-d98df02f-013a-4e0f-a1db-7fd6f88680aa-545ed653-9ddb-4c21-b7df-25f603adcb31",
			"name":"attr",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"25b4e9cfa4f04281ba355d202be365eb4d550fa35fbdbb2f627202c1d7ce3884"
				}
			],
			"description":"A set of tools for manipulating extended attributes on filesystem\nobjects, in particular getfattr(1) and setfattr(1).\nAn attr(1) command is also provided which is largely compatible\nwith the SGI IRIX tool of the same name.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/attr@2.5.1-5.oe2409?arch=aarch64&epoch=0&upstream=attr-2.5.1-5.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://savannah.nongnu.org/projects/attr",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Commands for Manipulating Filesystem Extended Attributes",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.5.1-5.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-audit-libs-3.1.2-c812cf19-ea1a-4683-aa53-e11301df08b9-031cd9bb-3d1d-4029-b303-4229a8e3a9a9",
			"name":"audit-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"3304bba7fc186f5801f167cb36c0a60d29572fc2090f8db4efd3bad238711a23"
				}
			],
			"description":"The audit-libs package contains the dynamic libraries needed for\napplications to use the audit framework.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/audit-libs@3.1.2-6.oe2409?arch=aarch64&epoch=1&upstream=audit-3.1.2-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://people.redhat.com/sgrubb/audit/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Dynamic library for libaudit",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:3.1.2-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-df0476aa-3d53-4db8-a724-070bfc623262",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-b1f72f60-bf4b-4c26-b444-359d3ef657e0",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libacl-2.3.2-61d472dd-9569-42e3-84ff-318c40bb383b-faa909ed-a4fe-45f1-a6af-69eeee523130",
			"name":"libacl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"3ac0f0b20bf4492d80bb7df0f365e4bd4beb94c8f3deab1b5b88e34bcd5927b1"
				}
			],
			"description":"This package contains the library for manipulating access control list.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libacl@2.3.2-1.oe2409?arch=aarch64&epoch=0&upstream=acl-2.3.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://savannah.nongnu.org/projects/acl",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library for supporting access control list",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.3.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libselinux-3.5-57c52f49-8367-4d2c-a66d-8b9ea75fc9e6-76c322b7-a456-4e4b-8152-dd9a97e240d7",
			"name":"libselinux",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f761222dccec82f227bf00495ec31a7d365eb3056143fe276ea8033a405d8cee"
				}
			],
			"description":"libselinux provides an interface to get and set process and file\nsecurity contexts and to obtain security policy decisions.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libselinux@3.5-3.oe2409?arch=aarch64&epoch=0&upstream=libselinux-3.5-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/SELinuxProject/selinux/wiki",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"SELinux library and simple utilities",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.5-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libsemanage-3.5-b50acef4-7cb1-4fcf-9f83-ba0d859411db-d6cde8fe-f478-4889-b6f0-d954b5fdabbc",
			"name":"libsemanage",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0dfd218a0c8804318abe6f3df92a4c2087090343585e26389ec167ddc00c6b26"
				}
			],
			"description":"libsemanage is the policy management library. Using libsepol and\nlibselinux to interact with the SELinux system, it also calls helper\nprograms for loading policy and for checking whether the\nfile_contexts configuration is valid.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libsemanage@3.5-1.oe2409?arch=aarch64&epoch=0&upstream=libsemanage-3.5-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/SELinuxProject/selinux/wiki",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"SELinux binary policy manipulation library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.5-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxcrypt-4.4.36-fcdbfeb7-9762-4a82-ba03-6bad05eddcad-f9a4a6c4-0f0a-42e7-86b0-744b60e5444f",
			"name":"libxcrypt",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2d3d32dd99e7e6cdc72d73e089dfe22f2b047519bdba4bf73561f998fcaeed3b"
				}
			],
			"description":"libxcrypt is a modern library for one-way hashing of passwords.\nIt supports a wide variety of both modern and historical hashing\nmethods: yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt,\nsha256crypt, md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt,\nand descrypt. It provides the traditional Unix crypt and crypt_r\ninterfaces, as well as a set of extended interfaces pioneered by\nOpenwall Linux, crypt_rn, crypt_ra, crypt_gensalt, crypt_gensalt_rn,\nand crypt_gensalt_ra.\nlibxcrypt is intended to be used by login(1), passwd(1), and other\nsimilar programs; that is, to hash a small number of passwords during\nan interactive authentication dialogue with a human. It is not suitable\nfor use in bulk password-cracking applications, or in any other situation\nwhere speed is more important than careful handling of sensitive data.\nHowever, it is intended to be fast and lightweight enough for use in\nservers that must field thousands of login attempts per minute.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxcrypt@4.4.36-2.oe2409?arch=aarch64&epoch=0&upstream=libxcrypt-4.4.36-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/besser82/libxcrypt",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Extended crypt library for DES, MD5, Blowfish and others",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.4.36-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-pam-1.5.3-2802a47e-4a4c-4ddb-9002-fc8e286d89a2-79ff78a0-91ff-4b7f-b3d7-2be2f72eecad",
			"name":"pam",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"261afddfc0f32b9652edcbb08047b600abc591b78799fb4693aee9dc2d1db3b6"
				}
			],
			"description":"PAM (Pluggable Authentication Modules) is a system of libraries that\nhandle the authentication tasks of applications (services) on the system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/pam@1.5.3-6.oe2409?arch=aarch64&epoch=0&upstream=pam-1.5.3-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.linux-pam.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Pluggable Authentication Modules for Linux",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.5.3-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-setup-2.14.5-f5295755-f990-4cbc-aeeb-4b26043c11f7-6864e96b-ddec-4da1-9330-75cc5870d7a0",
			"name":"setup",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"56cacba0e3f6c3c597689f986553d29eeb4fc36f1b85b764415c8c5e84104be7"
				}
			],
			"description":"The setup package contains a set of important system configuration and\nsetup files, such as passwd, group, and profile.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/setup@2.14.5-2.oe2409?arch=noarch&epoch=0&upstream=setup-2.14.5-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://pagure.io/setup/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of system configuration and setup files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.14.5-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-shadow-subid-devel-4.14.3-a8987e8c-07f7-4777-90a0-3d33ed44826e-8848d15b-6b89-4490-b40d-4ce5273b9f5a",
			"name":"shadow-subid-devel",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0b5d646efc73c1d29d162c81e337ca208846299a587142a0a99083cfc4ccc277"
				}
			],
			"description":"Development files for shadow-utils-subid.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/shadow-subid-devel@4.14.3-4.oe2409?arch=aarch64&epoch=2&upstream=shadow-4.14.3-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://pkg-shadow.alioth.debian.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Development package for shadow-utils-subid",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:4.14.3-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-attr-2.5.1-d98df02f-013a-4e0f-a1db-7fd6f88680aa-545ed653-9ddb-4c21-b7df-25f603adcb31"
		},
		{
			"spdxElementId":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-audit-libs-3.1.2-c812cf19-ea1a-4683-aa53-e11301df08b9-031cd9bb-3d1d-4029-b303-4229a8e3a9a9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-df0476aa-3d53-4db8-a724-070bfc623262"
		},
		{
			"spdxElementId":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-b1f72f60-bf4b-4c26-b444-359d3ef657e0"
		},
		{
			"spdxElementId":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libacl-2.3.2-61d472dd-9569-42e3-84ff-318c40bb383b-faa909ed-a4fe-45f1-a6af-69eeee523130"
		},
		{
			"spdxElementId":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libselinux-3.5-57c52f49-8367-4d2c-a66d-8b9ea75fc9e6-76c322b7-a456-4e4b-8152-dd9a97e240d7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libsemanage-3.5-b50acef4-7cb1-4fcf-9f83-ba0d859411db-d6cde8fe-f478-4889-b6f0-d954b5fdabbc"
		},
		{
			"spdxElementId":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxcrypt-4.4.36-fcdbfeb7-9762-4a82-ba03-6bad05eddcad-f9a4a6c4-0f0a-42e7-86b0-744b60e5444f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-pam-1.5.3-2802a47e-4a4c-4ddb-9002-fc8e286d89a2-79ff78a0-91ff-4b7f-b3d7-2be2f72eecad"
		},
		{
			"spdxElementId":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-setup-2.14.5-f5295755-f990-4cbc-aeeb-4b26043c11f7-6864e96b-ddec-4da1-9330-75cc5870d7a0"
		},
		{
			"spdxElementId":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-shadow-subid-devel-4.14.3-a8987e8c-07f7-4777-90a0-3d33ed44826e-8848d15b-6b89-4490-b40d-4ce5273b9f5a"
		}
	]
}