{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"rpmrebuild-0.2.18-7.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/rpmrebuild-0.2.18-7.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-087194ff-65f6-48f9-a714-83452ae4c4b9",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-f292148f-8c30-444c-bfec-6a7a1d26d67f",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-cpio-2.15-488dd5f7-8c7c-44bc-8139-1e658bdb51e0-f139fc19-49c7-43fa-b8db-7b98abcddb43",
			"name":"cpio",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0ec2579ace82d038889ecce648d7a67bb464f6fda6567bfc021d30289e49ca5c"
				}
			],
			"description":"GNU cpio copies files into or out of a cpio or tar archive.\nThe archive can be another file on the disk, a magnetic\ntape, or a pipe.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cpio@2.15-1.oe2409?arch=aarch64&epoch=0&upstream=cpio-2.15-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/cpio",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A GNU archiving program",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.15-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-grep-3.11-de352350-fa28-4dc0-b336-04b0e053038b-f18213ec-bcac-4acc-962e-37f2a4d3c382",
			"name":"grep",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c10c765f975815976eb3b2bbbc51688940c88bdb4cb1722357cc674573bd93e7"
				}
			],
			"description":"Grep searches one or more input files for lines containing a match to\na specified pattern. By default, Grep outputs the matching lines.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/grep@3.11-3.oe2409?arch=aarch64&epoch=0&upstream=grep-3.11-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/grep",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A string search utility",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.11-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-rpm-4.18.2-7b096ca1-9ef8-49f0-8a89-231470502d33-9d29eaa2-07b1-4346-829d-a01684d0bc1e",
			"name":"rpm",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c93dca3486cfb3dc0a06a7aab93c1a3388ef7048f38567e937a070fa49a7e44d"
				}
			],
			"description":"The RPM Package Manager (RPM) is a powerful package management system capability as below\n\n-building computer software from source into easily distributable packages\n-installing, updating and uninstalling packaged software\n-querying detailed information about the packaged software, whether installed or not\n-verifying integrity of packaged software and resulting software installation",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/rpm@4.18.2-15.oe2409?arch=aarch64&epoch=0&upstream=rpm-4.18.2-15.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.rpm.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"RPM Package Manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.18.2-15.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-rpm-build-4.18.2-1e4f9008-ab20-45d8-8272-270f5af9e88c-aad4447e-ced2-463c-8e49-843f1d6a6cf7",
			"name":"rpm-build",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8c4bc663cfd867322f8c5847639deb388a6e366aa142374e2590ac357acfb579"
				}
			],
			"description":"This package provides scripts and executable programs that used to\nbuild rpm packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/rpm-build@4.18.2-15.oe2409?arch=aarch64&epoch=0&upstream=rpm-4.18.2-15.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.rpm.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Scripts and executable programs used to build packages",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.18.2-15.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-rpmrebuild-2.18-c4c65a30-7722-41c1-a889-7bec8fc9f462",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-087194ff-65f6-48f9-a714-83452ae4c4b9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpmrebuild-2.18-c4c65a30-7722-41c1-a889-7bec8fc9f462",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-f292148f-8c30-444c-bfec-6a7a1d26d67f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpmrebuild-2.18-c4c65a30-7722-41c1-a889-7bec8fc9f462",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cpio-2.15-488dd5f7-8c7c-44bc-8139-1e658bdb51e0-f139fc19-49c7-43fa-b8db-7b98abcddb43"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpmrebuild-2.18-c4c65a30-7722-41c1-a889-7bec8fc9f462",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-grep-3.11-de352350-fa28-4dc0-b336-04b0e053038b-f18213ec-bcac-4acc-962e-37f2a4d3c382"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpmrebuild-2.18-c4c65a30-7722-41c1-a889-7bec8fc9f462",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-rpm-4.18.2-7b096ca1-9ef8-49f0-8a89-231470502d33-9d29eaa2-07b1-4346-829d-a01684d0bc1e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-rpmrebuild-2.18-c4c65a30-7722-41c1-a889-7bec8fc9f462",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-rpm-build-4.18.2-1e4f9008-ab20-45d8-8272-270f5af9e88c-aad4447e-ced2-463c-8e49-843f1d6a6cf7"
		}
	]
}