{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "lighttpd-mod_authn_dbi-0.1.4.72-2.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/lighttpd-mod_authn_dbi-0.1.4.72-2.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-lighttpd-mod-authn-dbi-1.4.72",
      "name": "lighttpd-mod_authn_dbi",
      "licenseConcluded": "BSD-3-Clause and OML and GPLv3 and GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5e7a04e93741780f94b946b3644bffbda5d6db5a98f6ca17e185c400b0762eff"
        }
      ],
      "description": "Authentication module for lighttpd that uses DBI",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/lighttpd-mod_authn_dbi@1.4.72-2.oe2403sp4?arch=aarch64&epoch=0&upstream=lighttpd-1.4.72-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/lighttpd/lighttpd1.4",
      "licenseDeclared": "BSD-3-Clause and OML and GPLv3 and GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Authentication module for lighttpd that uses DBI",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.4.72-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "972f6f0ead2fbc0f525623aa566baec969734e89308b0c92aa05a9f8d3c7299f"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=aarch64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libdbi-0.9.0",
      "name": "libdbi",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b9358a0fe125a2bad61c2e828e1c59c81562dd4f2c1d4ae7dc6a83b71116c1cd"
        }
      ],
      "description": "libdbi implements a database-independent abstraction layer in C,\nsimilar to the DBI/DBD layer in Perl. Writing one generic set of\ncode, programmers can leverage the power of multiple databases\nand multiple simultaneous database connections by using this\nframework.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libdbi@0.9.0-15.oe2403sp4?arch=aarch64&epoch=0&upstream=libdbi-0.9.0-15.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://libdbi.sourceforge.net/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "a database-independent abstraction layer in C",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.9.0-15.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxcrypt-4.4.36",
      "name": "libxcrypt",
      "licenseConcluded": "LGPLv2+ and BSD and Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9a046134587ee36468bb4cec7ef600876c3bf68a004062b83c8a04895ea9b9fe"
        }
      ],
      "description": "libxcrypt is a modern library for one-way hashing of passwords.\nIt supports a wide variety of both modern and historical hashing\nmethods: yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt,\nsha256crypt, md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt,\nand descrypt. It provides the traditional Unix crypt and crypt_r\ninterfaces, as well as a set of extended interfaces pioneered by\nOpenwall Linux, crypt_rn, crypt_ra, crypt_gensalt, crypt_gensalt_rn,\nand crypt_gensalt_ra.\nlibxcrypt is intended to be used by login(1), passwd(1), and other\nsimilar programs; that is, to hash a small number of passwords during\nan interactive authentication dialogue with a human. It is not suitable\nfor use in bulk password-cracking applications, or in any other situation\nwhere speed is more important than careful handling of sensitive data.\nHowever, it is intended to be fast and lightweight enough for use in\nservers that must field thousands of login attempts per minute.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxcrypt@4.4.36-3.oe2403sp4?arch=aarch64&epoch=0&upstream=libxcrypt-4.4.36-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/besser82/libxcrypt",
      "licenseDeclared": "LGPLv2+ and BSD and Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Extended crypt library for DES, MD5, Blowfish and others",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.4.36-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-lighttpd-1.4.72",
      "name": "lighttpd",
      "licenseConcluded": "BSD-3-Clause and OML and GPLv3 and GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fac9474961f40357ed50f25f5606083df4b488ad0cb1bd505942e64784da548f"
        }
      ],
      "description": "Secure, fast, compliant and very flexible web-server which has been optimized\nfor high-performance environments. It has a very low memory footprint compared\nto other webservers and takes care of cpu-load. Its advanced feature-set\n(FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many more) make\nit the perfect webserver-software for every server that is suffering load\nproblems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/lighttpd@1.4.72-2.oe2403sp4?arch=aarch64&epoch=0&upstream=lighttpd-1.4.72-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/lighttpd/lighttpd1.4",
      "licenseDeclared": "BSD-3-Clause and OML and GPLv3 and GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Lightning fast webserver with light system requirements",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.4.72-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-nettle-3.8.1",
      "name": "nettle",
      "licenseConcluded": "LGPLv3+ or GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2b6fcf039e92eb1cc56de14aaaa1a4ece8a0ef8bbabc8fa5a296a34cc4bde9d8"
        }
      ],
      "description": "Nettle is a cryptographic library designed to fit any context:\nin crypto toolkits for object-oriented languages, in applications\nlike LSH or GnuPG, or even in kernel space.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/nettle@3.8.1-1.oe2403sp4?arch=aarch64&epoch=0&upstream=nettle-3.8.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.lysator.liu.se/~nisse/nettle/",
      "licenseDeclared": "LGPLv3+ or GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A low-level cryptographic library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.8.1-1.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-lighttpd-mod-authn-dbi-1.4.72",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-lighttpd-mod-authn-dbi-1.4.72",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libdbi-0.9.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-lighttpd-mod-authn-dbi-1.4.72",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxcrypt-4.4.36"
    },
    {
      "spdxElementId": "SPDXRef-rpm-lighttpd-mod-authn-dbi-1.4.72",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-lighttpd-1.4.72"
    },
    {
      "spdxElementId": "SPDXRef-rpm-lighttpd-mod-authn-dbi-1.4.72",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-nettle-3.8.1"
    }
  ]
}