{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"theora-tools-1.1.1.1-26.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/theora-tools-1.1.1.1-26.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-SDL-1.2.15-34ea3800-6142-4373-a292-3616cfeaf523-704f20ec-dc25-4d18-a8e0-80b992170ac8",
			"name":"SDL",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aac960196e8a33f1da343368a57dd5db1fe9ebbaa72fc83050e4fea8e00efa40"
				}
			],
			"description":"Simple DirectMedia Layer(SDL) is a cross-platform development library designed\\\nto provide low level access to audio, keyboard, mouse, joystick, and graphics\\\nhardware via OpenGL and Direct3D. It is used by video playback software, emulators,\\\nand popular games including Valve's award winning catalog and many Humble Bundle games.\\",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/SDL@1.2.15-40.oe2409?arch=aarch64&epoch=0&upstream=SDL-1.2.15-40.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.libsdl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A cross-platform multimedia library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.15-40.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-6cdd237b-ec04-4ed8-a0c3-42c4ad327603",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libogg-1.3.5-28caf938-6aab-4799-9705-084b86cdb109-dbcd7fae-41b1-4c28-8f81-217fbefc3c9e",
			"name":"libogg",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"78df0fd27268f3f4dbad78c995deb0e68dfd24484a488f7d2941809b2e73f2f2"
				}
			],
			"description":"Libogg is a library for manipulating ogg bitstreams.  It handles\nboth making ogg bitstreams and getting packets from ogg bitstreams.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libogg@1.3.5-3.oe2409?arch=aarch64&epoch=2&upstream=libogg-1.3.5-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.xiph.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Ogg Bitstream Library.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:1.3.5-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libpng-1.6.43-0bf8c858-dc21-4f3e-95c2-bcccc868b760-a1867766-a7be-4568-bf6e-4ac20ab9ed89",
			"name":"libpng",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"37d2748d0400e5eed8100d8dd13d2d765b87bd3a8c39f683af4eccd1f364c979"
				}
			],
			"description":"The libpng package contains libraries used by other programs for reading and writing PNG format files.\nThe PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF,\nwith many improvements and extensions and lack of patent problems.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libpng@1.6.43-1.oe2409?arch=aarch64&epoch=2&upstream=libpng-1.6.43-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.libpng.org/pub/png/libpng.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library of functions for manipulating PNG image format files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:1.6.43-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libtheora-1.1.1-bec27cdf-9dc7-4030-9ebd-54cb15c6e326-40d26a8f-02a5-48e1-8579-42dedb1c19d6",
			"name":"libtheora",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c60cc4695ac964305e1b1efe7ddecb287a0aa53f4315daec264f6b8467e8ad97"
				}
			],
			"description":"Theora is a free and open video compression format from the Xiph.org Foundation. Like all\nour multimedia technology it can be used to distribute film and video online and on disc\nwithout the licensing and royalty fees or vendor lock-in associated with other formats.\n\ndevel-docs\nThe libtheora-devel-docs package contains the documentation needed\nto develop applications with libtheora.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libtheora@1.1.1-26.oe2409?arch=aarch64&epoch=1&upstream=libtheora-1.1.1-26.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.theora.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Theora Video Compression",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.1.1-26.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libvorbis-1.3.7-13817f71-aa55-47d1-8d4f-61fa46b1430b-12fad189-559f-46f5-b26f-d329fade4543",
			"name":"libvorbis",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"9397eaa180c6542d51b3a185e7ca69a81fe1fc5064089b2b3fb2117997ec14e2"
				}
			],
			"description":"Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free,\ngeneral-purpose compressed audio format for audio and music at fixed\nand variable bitrates.\nThe libvorbis package provides both a standard encoder and decoder runtime\nlibraries  under a BSD license.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libvorbis@1.3.7-3.oe2409?arch=aarch64&epoch=1&upstream=libvorbis-1.3.7-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.xiph.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The Vorbis General Audio Compression Codec",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.3.7-3.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-theora-tools-1.1.1-4e0e9a30-48ca-4c00-85b6-f608fec42fa1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-SDL-1.2.15-34ea3800-6142-4373-a292-3616cfeaf523-704f20ec-dc25-4d18-a8e0-80b992170ac8"
		},
		{
			"spdxElementId":"SPDXRef-rpm-theora-tools-1.1.1-4e0e9a30-48ca-4c00-85b6-f608fec42fa1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-6cdd237b-ec04-4ed8-a0c3-42c4ad327603"
		},
		{
			"spdxElementId":"SPDXRef-rpm-theora-tools-1.1.1-4e0e9a30-48ca-4c00-85b6-f608fec42fa1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libogg-1.3.5-28caf938-6aab-4799-9705-084b86cdb109-dbcd7fae-41b1-4c28-8f81-217fbefc3c9e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-theora-tools-1.1.1-4e0e9a30-48ca-4c00-85b6-f608fec42fa1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libpng-1.6.43-0bf8c858-dc21-4f3e-95c2-bcccc868b760-a1867766-a7be-4568-bf6e-4ac20ab9ed89"
		},
		{
			"spdxElementId":"SPDXRef-rpm-theora-tools-1.1.1-4e0e9a30-48ca-4c00-85b6-f608fec42fa1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libtheora-1.1.1-bec27cdf-9dc7-4030-9ebd-54cb15c6e326-40d26a8f-02a5-48e1-8579-42dedb1c19d6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-theora-tools-1.1.1-4e0e9a30-48ca-4c00-85b6-f608fec42fa1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libvorbis-1.3.7-13817f71-aa55-47d1-8d4f-61fa46b1430b-12fad189-559f-46f5-b26f-d329fade4543"
		}
	]
}