{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"tang-0.14-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/tang-0.14-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-41d83db8-e035-4476-b066-95165290461f",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-66ebc52f-be96-491a-a243-6afd10a5a5cc",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-573ff5f2-bf04-4a30-a396-2c5ec5508f20",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-grep-3.11-de352350-fa28-4dc0-b336-04b0e053038b-a5dc2239-2f4c-4748-a583-ef347f661de4",
			"name":"grep",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c10c765f975815976eb3b2bbbc51688940c88bdb4cb1722357cc674573bd93e7"
				}
			],
			"description":"Grep searches one or more input files for lines containing a match to\na specified pattern. By default, Grep outputs the matching lines.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/grep@3.11-3.oe2409?arch=aarch64&epoch=0&upstream=grep-3.11-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/grep",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A string search utility",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.11-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-http-parser-2.9.4-ba1042b5-2de6-4bf1-b16a-60ffa2f3ea75-60647204-c1c3-49f4-84eb-6f7fb56ad2c2",
			"name":"http-parser",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8f9ce7fa12e1b40d33f986280be8e7240bba673ea6ee8d6651db373d365c03d5"
				}
			],
			"description":"http-parser parses the HTTP request headers and body. As such, it acts as\na barrier in the policy to guarantee that the entire content has been received\nbefore any other filters are invoked.The parser filter forces the server\nto do \"store-and-forward\" routing instead of the default \"cut-through\" routing,\nwhere the request is only parsed on-demand. This filter can be used as a simple test\nto ensure that the message is XML, for example.\n\nFeatures:\n\n  * No dependencies\n  * Handles persistent streams (keep-alive)\n  * Decodes chunked encoding\n  * Upgrade support\n  * Defends against buffer overflow attacks",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/http-parser@2.9.4-2.oe2409?arch=aarch64&epoch=0&upstream=http-parser-2.9.4-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/nodejs/http-parser",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"HTTP request/response parser for C",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.9.4-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-jansson-2.14-7baf4fe1-f507-45c9-8c5a-e14c735df829-bcad0b48-024a-4168-b217-ba7a29d74803",
			"name":"jansson",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"9b8e2189237dc0d8bd84c947c72ea0a47cc9992ea0e309303af9f3016868551e"
				}
			],
			"description":"Jansson is a C library for encoding, decoding and manipulating JSON data.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/jansson@2.14-5.oe2409?arch=aarch64&epoch=0&upstream=jansson-2.14-5.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.digip.org/jansson/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A C library for encoding, decoding and manipulating JSON data",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.14-5.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-jose-14-cd2b0709-6f00-4427-98ad-f2eb9a0563aa-4021aa2b-7812-4553-a933-3e5469277d61",
			"name":"jose",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"48a653616cbc24100bbc5ec425af3bc490020b4b2fcc7ed323a8ee6b6f424374"
				}
			],
			"description":"José is a C-language implementation of the Javascript Object\nSigning and Encryption standards. José provides a command-line\nutility which encompasses most of the JOSE features. This allows\nfor easy integration into your project and one-off scripts.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/jose@14-1.oe2409?arch=aarch64&epoch=0&upstream=jose-14-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/latchset/jose",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"José is a command line utility for performing various tasks on JSON  objects",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:14-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-sed-4.9-623194af-312c-425d-9d76-c067635cbc69-d1e01320-8aa4-422c-93b9-34e82c546a8d",
			"name":"sed",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0341dbe3b67255877c126baf72bca15e1d6c87210c4d4aefeda1f69aebe241f9"
				}
			],
			"description":"Sed is a non-interactive command-line text editor. A stream editor is used\nto per-form basic text transformations on an input stream (a file or input\nfrom a pipeline).",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/sed@4.9-4.oe2409?arch=aarch64&epoch=0&upstream=sed-4.9-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/sed/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"non-interactive command-line text editor",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.9-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b-daa34df5-33d5-4e89-85a6-c1ae35328e1b",
			"name":"shadow",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0b4e5e30e7e79208c364dc951155b341b6353207412480e6adf95f89d270d9a9"
				}
			],
			"description":"This package includes the necessary programs for converting plain\npassword files to the shadow password format and to manage user and\ngroup accounts.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/shadow@4.14.3-4.oe2409?arch=aarch64&epoch=2&upstream=shadow-4.14.3-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://pkg-shadow.alioth.debian.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Tools for managing accounts and shadow password files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:4.14.3-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-eb1c0a37-306c-4a13-978f-78292422acbd",
			"name":"systemd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fbb6e242b644b0ba4ff5b0dd58e82c338e85dc72f01211275506496049450fb5"
				}
			],
			"description":"systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"System and Service Manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-tang-14-b070fad6-4816-41a8-a320-4829c814312a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-41d83db8-e035-4476-b066-95165290461f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tang-14-b070fad6-4816-41a8-a320-4829c814312a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-66ebc52f-be96-491a-a243-6afd10a5a5cc"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tang-14-b070fad6-4816-41a8-a320-4829c814312a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-573ff5f2-bf04-4a30-a396-2c5ec5508f20"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tang-14-b070fad6-4816-41a8-a320-4829c814312a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-grep-3.11-de352350-fa28-4dc0-b336-04b0e053038b-a5dc2239-2f4c-4748-a583-ef347f661de4"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tang-14-b070fad6-4816-41a8-a320-4829c814312a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-http-parser-2.9.4-ba1042b5-2de6-4bf1-b16a-60ffa2f3ea75-60647204-c1c3-49f4-84eb-6f7fb56ad2c2"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tang-14-b070fad6-4816-41a8-a320-4829c814312a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-jansson-2.14-7baf4fe1-f507-45c9-8c5a-e14c735df829-bcad0b48-024a-4168-b217-ba7a29d74803"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tang-14-b070fad6-4816-41a8-a320-4829c814312a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-jose-14-cd2b0709-6f00-4427-98ad-f2eb9a0563aa-4021aa2b-7812-4553-a933-3e5469277d61"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tang-14-b070fad6-4816-41a8-a320-4829c814312a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-sed-4.9-623194af-312c-425d-9d76-c067635cbc69-d1e01320-8aa4-422c-93b9-34e82c546a8d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tang-14-b070fad6-4816-41a8-a320-4829c814312a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b-daa34df5-33d5-4e89-85a6-c1ae35328e1b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tang-14-b070fad6-4816-41a8-a320-4829c814312a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-eb1c0a37-306c-4a13-978f-78292422acbd"
		}
	]
}