{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "coreutils-0.9.4-22.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/coreutils-0.9.4-22.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9a45326d88eefd6f8a0018a1626f7decc11e3649f47296d7ce55e5ce473c3296"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=aarch64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-22.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-attr-2.5.1",
      "name": "attr",
      "licenseConcluded": "GPLv2+ AND LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "37a87d83198fb77cb235fa647b37afc84d18a5c146440ad4475cf262c86161b4"
        }
      ],
      "description": "A set of tools for manipulating extended attributes on filesystem\nobjects, in particular getfattr(1) and setfattr(1).\nAn attr(1) command is also provided which is largely compatible\nwith the SGI IRIX tool of the same name.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/attr@2.5.1-6.oe2403sp4?arch=aarch64&epoch=0&upstream=attr-2.5.1-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://savannah.nongnu.org/projects/attr",
      "licenseDeclared": "GPLv2+ AND LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Commands for Manipulating Filesystem Extended Attributes",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.1-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "972f6f0ead2fbc0f525623aa566baec969734e89308b0c92aa05a9f8d3c7299f"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=aarch64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gmp-6.3.0",
      "name": "gmp",
      "licenseConcluded": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "32e18231ed02f471969b56c3a755ab26f7c92547c614856e8ac9cccc90feed5f"
        }
      ],
      "description": "GMP is a portable library written in C for arbitrary precision arithmetic\non integers, rational numbers, and floating-point numbers. It aims to provide\nthe fastest possible arithmetic for all applications that need higher\nprecision than is directly supported by the basic C types.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gmp@6.3.0-5.oe2403sp4?arch=aarch64&epoch=1&upstream=gmp-6.3.0-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gmplib.org",
      "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A GNU multiple precision arithmetic library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:6.3.0-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libacl-2.3.1",
      "name": "libacl",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "78419bcdfde356ec07c263ac079072646ea4b19826fad68602076dd89f89d108"
        }
      ],
      "description": "This package contains the library for manipulating access control list.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libacl@2.3.1-6.oe2403sp4?arch=aarch64&epoch=0&upstream=acl-2.3.1-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://savannah.nongnu.org/projects/acl",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Library for supporting access control list",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.1-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcap-2.69",
      "name": "libcap",
      "licenseConcluded": "GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b14637ace5072a3252363b3ff4a1890fd3221ec391f0fcb05b312726a1541759"
        }
      ],
      "description": "This is a library for getting and setting POSIX.1e (formerly POSIX 6)\ndraft 15 capabilities.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcap@2.69-7.oe2403sp4?arch=aarch64&epoch=0&upstream=libcap-2.69-7.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://sites.google.com/site/fullycapable",
      "licenseDeclared": "GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A library for getting and setting POSIX.1e draft 15 capabilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.69-7.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libselinux-3.5",
      "name": "libselinux",
      "licenseConcluded": "Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c4c00b93eb3e3cd6f1cfbc0bcf912050feac49f118b428a5d9c26a797363c1c0"
        }
      ],
      "description": "libselinux provides an interface to get and set process and file\nsecurity contexts and to obtain security policy decisions.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libselinux@3.5-9.oe2403sp4?arch=aarch64&epoch=0&upstream=libselinux-3.5-9.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/SELinuxProject/selinux/wiki",
      "licenseDeclared": "Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "SELinux library and simple utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.5-9.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-ncurses-6.4",
      "name": "ncurses",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2485b23e65a71adc73b5b154e59ddb430b2359ba95bd824b808c74862b6cb9e0"
        }
      ],
      "description": "The ncurses (new curses) library is a free software emulation of\ncurses in System V Release 4.0 (SVr4), and more. It uses terminfo\nformat, supports pads and color and multiple highlights and forms\ncharacters and function-key mapping, and has all the other SVr4-curses\nenhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/ncurses@6.4-13.oe2403sp4?arch=aarch64&epoch=0&upstream=ncurses-6.4-13.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://invisible-island.net/ncurses/ncurses.html",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Terminal control library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.4-13.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.5.6",
      "name": "openssl-libs",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f8a3454edaa65c11b49cf6c459f501bdb466c3eb128762ae07206c23bbc55043"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.5.6-4.oe2403sp4?arch=aarch64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.5.6-4.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-coreutils-9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-attr-2.5.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-coreutils-9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-coreutils-9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gmp-6.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-coreutils-9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libacl-2.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-coreutils-9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcap-2.69"
    },
    {
      "spdxElementId": "SPDXRef-rpm-coreutils-9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libselinux-3.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-coreutils-9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-ncurses-6.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-coreutils-9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.5.6"
    }
  ]
}