{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "libsolv-0.0.7.24-5.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-08-08T17:56:00.557930832Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/libsolv-0.0.7.24-5.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-libsolv-0.7.24",
      "name": "libsolv",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8ac9f35a593d5ee80cce902d647a5c593b6f7d580ffc7fa9a6785c572caf04a5"
        }
      ],
      "description": "A free package dependency solver using a satisfiability algorithm. The\nlibrary is based on two major, but independent, blocks:\n\n- Using a dictionary approach to store and retrieve package\n  and dependency information.\n\n- Using satisfiability, a well known and researched topic, for\n  resolving package dependencies.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libsolv@0.7.24-5.oe2403sp3?arch=aarch64&epoch=0&upstream=libsolv-0.7.24-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/openSUSE/libsolv",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "Package dependency solver",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.7.24-5.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-bzip2-1.0.8",
      "name": "bzip2",
      "licenseConcluded": "BSD-4-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a6b6065aa67ed415b8eda44aa85b1dacff840d26b68cd4fe1ecd4753389e9515"
        }
      ],
      "description": "bzip2 is a freely available, patent free, high-quality data compressor.\nIt typically compresses files to within 10% to 15% of the best available\ntechniques (the PPM family of statistical compressors), whilst being\naround twice as fast at compression and six times faster at decompression.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bzip2@1.0.8-9.oe2403sp3?arch=aarch64&epoch=0&upstream=bzip2-1.0.8-9.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.sourceware.org/bzip2/",
      "licenseDeclared": "BSD-4-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "A high-quality data compressor",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.8-9.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ddc32e0b4d9456930df864f399edc41b74031a659bbd0668c3e84ae7f47fba94"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp3?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxml2-2.11.9",
      "name": "libxml2",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0ec4a3b770e3244c52ece7ba6c7d9781b5b571223e2b46d70783fd4fdbc5f14e"
        }
      ],
      "description": "This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxml2@2.11.9-12.oe2403sp3?arch=aarch64&epoch=0&upstream=libxml2-2.11.9-12.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://xmlsoft.org/",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "Library providing XML and HTML support",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.11.9-12.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-rpm-4.18.2",
      "name": "rpm",
      "licenseConcluded": "GPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "791368f1bc9db3376f3cf7e20a260d9222f81da31ddf067ef6915f0d11079ed6"
        }
      ],
      "description": "The RPM Package Manager (RPM) is a powerful package management system capability as below\n\n-building computer software from source into easily distributable packages\n-installing, updating and uninstalling packaged software\n-querying detailed information about the packaged software, whether installed or not\n-verifying integrity of packaged software and resulting software installation",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rpm@4.18.2-34.oe2403sp3?arch=aarch64&epoch=0&upstream=rpm-4.18.2-34.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://rpm.org/",
      "licenseDeclared": "GPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "RPM Package Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.18.2-34.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-rpm-libs-4.18.2",
      "name": "rpm-libs",
      "licenseConcluded": "GPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "59594203551894b2551c0ddfb55e54f480f6f34d35d64e04df011e125afd726e"
        }
      ],
      "description": "Shared library of rpm 4.18.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rpm-libs@4.18.2-34.oe2403sp3?arch=aarch64&epoch=0&upstream=rpm-4.18.2-34.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://rpm.org/",
      "licenseDeclared": "GPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "Shared library of rpm 4.18",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.18.2-34.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-libs-5.4.7",
      "name": "xz-libs",
      "licenseConcluded": "GPL-3.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "500ba9e8acb18ca462f131eaed0e3d2cf0fd3ce05ef8e8e35884e5d0d45323d0"
        }
      ],
      "description": "Libraries for decoding files compressed with LZMA or XZ utils.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz-libs@5.4.7-8.oe2403sp3?arch=aarch64&epoch=0&upstream=xz-5.4.7-8.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz",
      "licenseDeclared": "GPL-3.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "Libraries for xz",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.7-8.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5130eb6aecea73f74d04ca756ee5bd7ddd7b972a4594cb29ea020bb5be27a6a9"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp3?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-libsolv-0.7.24",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bzip2-1.0.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libsolv-0.7.24",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libsolv-0.7.24",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxml2-2.11.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libsolv-0.7.24",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-rpm-4.18.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libsolv-0.7.24",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-rpm-libs-4.18.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libsolv-0.7.24",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-libs-5.4.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libsolv-0.7.24",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}