{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "openssh-0.9.6p1-13.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-08-08T17:56:00.557930832Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/openssh-0.9.6p1-13.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-openssh-9.6p1",
      "name": "openssh",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e6e5bae963af10279f6ac1ad14ef44113c6d81c54a62c0ac83f8a17c941a6454"
        }
      ],
      "description": "OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\\nIt encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\\nother attacks. In addition, OpenSSH provides a large suite of secure tunneling \\\ncapabilities, several authentication methods, and sophisticated configuration options.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssh@9.6p1-13.oe2403sp3?arch=aarch64&epoch=0&upstream=openssh-9.6p1-13.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.openssh.com/portable.html",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "An open source implementation of SSH protocol version 2",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.6p1-13.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ddc32e0b4d9456930df864f399edc41b74031a659bbd0668c3e84ae7f47fba94"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp3?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssh-server-9.6p1",
      "name": "openssh-server",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "002ac8c5458df0feafae22a1c005b23d0744a9b7d5424981ea3f8a6d3ae5c517"
        }
      ],
      "description": "OpenSSH is a free version of SSH (Secure SHell), a program for logging\ninto and executing commands on a remote machine. This package contains\nthe secure shell daemon (sshd). The sshd daemon allows SSH clients to\nsecurely connect to your SSH server.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssh-server@9.6p1-13.oe2403sp3?arch=aarch64&epoch=0&upstream=openssh-9.6p1-13.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.openssh.com/portable.html",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "An open source SSH server daemon",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.6p1-13.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.0.12",
      "name": "openssl-libs",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "28428dbce89ace0d9a74d782639a320d11f30dbbb2d109f51c3cb902fbffb0c7"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.0.12-32.oe2403sp3?arch=aarch64&epoch=1&upstream=openssl-3.0.12-32.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.0.12-32.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-util-linux-2.39.1",
      "name": "util-linux",
      "licenseConcluded": "GPLv2 and GPLv2+ and LGPLv2+ and BSD with advertising and Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4403463c15e0664f16ec5886ecc4f59b5a647619499c501b0fc0f13ef7f09d65"
        }
      ],
      "description": "The util-linux package contains a random collection of files that\nimplements some low-level basic linux utilities.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/util-linux@2.39.1-35.oe2403sp3?arch=aarch64&epoch=0&upstream=util-linux-2.39.1-35.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git",
      "licenseDeclared": "GPLv2 and GPLv2+ and LGPLv2+ and BSD with advertising and Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "A random collection of Linux utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.39.1-35.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5130eb6aecea73f74d04ca756ee5bd7ddd7b972a4594cb29ea020bb5be27a6a9"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp3?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-openssh-9.6p1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-9.6p1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssh-server-9.6p1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-9.6p1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.0.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-9.6p1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-util-linux-2.39.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-9.6p1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}