{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "mariadb-server-4.10.11.18-1.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/mariadb-server-4.10.11.18-1.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-mariadb-server-10.11.18",
      "name": "mariadb-server",
      "licenseConcluded": "GPLv2 and LGPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "59586858073d377f625f4848c95e6e90be49be7a6c32dad9304ba4ecc722b2cf"
        }
      ],
      "description": "MariaDB is a multi-user, multi-threaded SQL database server. It is a\nclient/server implementation consisting of a server daemon (mariadbd)\nand many different client programs and libraries. This package contains\nthe MariaDB server and some accompanying files and directories.\nMariaDB is a community developed fork from MySQL.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/mariadb-server@10.11.18-1.oe2403sp4?arch=x86_64&epoch=4&upstream=mariadb-10.11.18-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://mariadb.org",
      "licenseDeclared": "GPLv2 and LGPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The MariaDB server and related files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "4:10.11.18-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bash-5.2.15",
      "name": "bash",
      "licenseConcluded": "GPLv3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a980f85dfb01951730f94f5537d836d925d5e23cafc786f2e63f0087f69e1d93"
        }
      ],
      "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/bash",
      "licenseDeclared": "GPLv3",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "It is the Bourne Again Shell",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.15-19.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bzip2-1.0.8",
      "name": "bzip2",
      "licenseConcluded": "BSD-4-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ae91aa2cd54afa85a064b0cd484373e9f3fc676c1c1eb71a45d0c010f19b16a2"
        }
      ],
      "description": "bzip2 is a freely available, patent free, high-quality data compressor.\nIt typically compresses files to within 10% to 15% of the best available\ntechniques (the PPM family of statistical compressors), whilst being\naround twice as fast at compression and six times faster at decompression.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bzip2@1.0.8-9.oe2403sp4?arch=x86_64&epoch=0&upstream=bzip2-1.0.8-9.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.sourceware.org/bzip2/",
      "licenseDeclared": "BSD-4-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A high-quality data compressor",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.8-9.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "433e473f0f3e48029a50a63e45680e5ae03a29789cc26d8952d691ea388b3b62"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-22.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b136cc1d6c94e7df3b522b541c89c22084f0ce440f1b9714ed930f664b10ea04"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-iproute-6.6.0",
      "name": "iproute",
      "licenseConcluded": "GPLv2+ and Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "96e7b3850c897e5e915cc2550b70a27487127412d76bfdea433fa44137567d2e"
        }
      ],
      "description": "Iproute2 is a collection of user-space utilities to set up networking\nunder Linux from the command-line. It can inspect and configure,\namong other things: interface paramters, IP addresses, routing,\ntunnels, bridges, packet transformations (IPsec, etc.), and Quality\nof Service.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/iproute@6.6.0-11.oe2403sp4?arch=x86_64&epoch=1&upstream=iproute-6.6.0-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://kernel.org/pub/linux/utils/net/iproute2/",
      "licenseDeclared": "GPLv2+ and Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Linux network configuration utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:6.6.0-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libaio-0.3.113",
      "name": "libaio",
      "licenseConcluded": "LGPL-2.0-or-later",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1429c8553de79e412f587c34ae2b28d4b094ce127eee710e2bb39aeb4e79da09"
        }
      ],
      "description": "The Linux-native asynchronous I/O facility (\"async I/O\", or \"aio\") has a\nricher API and capability set than the simple POSIX async I/O facility.\nThis library, libaio, provides the Linux-native API for async I/O.\nThe POSIX async I/O facility requires this library in order to provide\nkernel-accelerated async I/O capabilities, as do applications which\nrequire the Linux-native async I/O API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libaio@0.3.113-10.oe2403sp4?arch=x86_64&epoch=0&upstream=libaio-0.3.113-10.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://pagure.io/libaio",
      "licenseDeclared": "LGPL-2.0-or-later",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Linux-native asynchronous I/O access library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.3.113-10.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcurl-8.4.0",
      "name": "libcurl",
      "licenseConcluded": "curl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "770cd5a6c6bfb3c08b1a9610375e2f421679b9783d6937a0021fdab3f74cf4c8"
        }
      ],
      "description": "A library for getting files from web servers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcurl@8.4.0-30.oe2403sp4?arch=x86_64&epoch=0&upstream=curl-8.4.0-30.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://curl.se/",
      "licenseDeclared": "curl",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A library for getting files from web servers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.4.0-30.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgcc-12.3.1",
      "name": "libgcc",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "092db224576930eedd234726562459f564bb59dda6c5eca2b004d8abdecc8a2c"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgcc@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GCC version 12 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libstdc---12.3.1",
      "name": "libstdc++",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "082bf133e19c4d9e84db23bfc3eee5375a3069ac3ff0a2053138c91066ddab5b"
        }
      ],
      "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libstdc++@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GNU Standard C++ Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-liburing-2.4",
      "name": "liburing",
      "licenseConcluded": "(GPLv2 with exceptions and LGPLv2+) or MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "29cab70c671e33bd3d00ad6655e03060752ecc52cc4e8a22121362073238ce33"
        }
      ],
      "description": "Provides native async IO for the Linux kernel, in a fast and efficient\nmanner, for both buffered and O_DIRECT.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/liburing@2.4-1.oe2403sp4?arch=x86_64&epoch=0&upstream=liburing-2.4-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://git.kernel.dk/cgit/liburing/",
      "licenseDeclared": "(GPLv2 with exceptions and LGPLv2+) or MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Linux-native io_uring I/O access library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libxcrypt-4.4.36",
      "name": "libxcrypt",
      "licenseConcluded": "LGPLv2+ and BSD and Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f7aeed87c9ca1fcfe4a7377505be5de3a36e38cad3e0412ce2d4114a38c933e1"
        }
      ],
      "description": "libxcrypt is a modern library for one-way hashing of passwords.\nIt supports a wide variety of both modern and historical hashing\nmethods: yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt,\nsha256crypt, md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt,\nand descrypt. It provides the traditional Unix crypt and crypt_r\ninterfaces, as well as a set of extended interfaces pioneered by\nOpenwall Linux, crypt_rn, crypt_ra, crypt_gensalt, crypt_gensalt_rn,\nand crypt_gensalt_ra.\nlibxcrypt is intended to be used by login(1), passwd(1), and other\nsimilar programs; that is, to hash a small number of passwords during\nan interactive authentication dialogue with a human. It is not suitable\nfor use in bulk password-cracking applications, or in any other situation\nwhere speed is more important than careful handling of sensitive data.\nHowever, it is intended to be fast and lightweight enough for use in\nservers that must field thousands of login attempts per minute.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libxcrypt@4.4.36-3.oe2403sp4?arch=x86_64&epoch=0&upstream=libxcrypt-4.4.36-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/besser82/libxcrypt",
      "licenseDeclared": "LGPLv2+ and BSD and Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Extended crypt library for DES, MD5, Blowfish and others",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.4.36-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-lz4-1.9.4",
      "name": "lz4",
      "licenseConcluded": "GPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4199914de224546d2618943863f7a04bd0ccb960bdd59159bf99aa8ccfc1e411"
        }
      ],
      "description": "LZ4 is lossless compression algorithm, providing compression speed > 500 MB/s per\ncore (>0.15 Bytes/cycle). It features an extremely fast decoder, with speed in\nmultiple GB/s per core (~1 Byte/cycle). A high compression derivative, called\nLZ4_HC, is available, trading customizable CPU time for compression ratio.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/lz4@1.9.4-5.oe2403sp4?arch=x86_64&epoch=0&upstream=lz4-1.9.4-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://lz4.github.io/lz4/",
      "licenseDeclared": "GPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Extremely fast compression algorithm",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.9.4-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-lzo-2.10",
      "name": "lzo",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3befdfe84767b4e2f49ee2bcf956db246eb82953e0a03ee3041e270c9ca126da"
        }
      ],
      "description": "LZO is a data compression library which is suitable for data\nde-/compression in real-time. This means it favours speed\nover compression ratio.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/lzo@2.10-5.oe2403sp4?arch=x86_64&epoch=0&upstream=lzo-2.10-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.oberhumer.com/opensource/lzo/",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "a real-time data compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.10-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-mariadb-10.11.18",
      "name": "mariadb",
      "licenseConcluded": "GPLv2 and LGPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "877ffb6df3bfe42ecae30d3d8c999f7d9f4febd6fd742f7005391b95e1b26131"
        }
      ],
      "description": "MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded\nSQL database server. It is a client/server implementation consisting of\na server daemon (mariadbd) and many different client programs and libraries.\nThe base package contains the standard MariaDB/MySQL client programs and\nutilities.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/mariadb@10.11.18-1.oe2403sp4?arch=x86_64&epoch=4&upstream=mariadb-10.11.18-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://mariadb.org",
      "licenseDeclared": "GPLv2 and LGPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A very fast and robust SQL database server",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "4:10.11.18-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-mariadb-common-10.11.18",
      "name": "mariadb-common",
      "licenseConcluded": "GPLv2 and LGPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b481ba7bd077bb3b664fe7a0bfa380b05ed5c6b793332685ecc070dfa177dd82"
        }
      ],
      "description": "The package provides the essential shared files for any MariaDB program.\nYou will need to install this package to use any other MariaDB package.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/mariadb-common@10.11.18-1.oe2403sp4?arch=x86_64&epoch=4&upstream=mariadb-10.11.18-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://mariadb.org",
      "licenseDeclared": "GPLv2 and LGPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The shared files required by server and client",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "4:10.11.18-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-mariadb-config-10.11.18",
      "name": "mariadb-config",
      "licenseConcluded": "GPLv2 and LGPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6c22e887ad74925bd4ca5c1789e02bf1c8172d47a1d07d1f41fd4a71b86071c7"
        }
      ],
      "description": "The package provides the config file my.cnf and my.cnf.d directory used by any\nMariaDB or MySQL program. You will need to install this package to use any\nother MariaDB or MySQL package if the config files are not provided in the\npackage itself.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/mariadb-config@10.11.18-1.oe2403sp4?arch=x86_64&epoch=4&upstream=mariadb-10.11.18-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://mariadb.org",
      "licenseDeclared": "GPLv2 and LGPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The config files required by server and client",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "4:10.11.18-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-mariadb-errmsg-10.11.18",
      "name": "mariadb-errmsg",
      "licenseConcluded": "GPLv2 and LGPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4d602d58b63f17aefef11d97d1b51a08899d722d74b3ca64f71885190082443e"
        }
      ],
      "description": "The package provides error messages files for the MariaDB daemon and the\nembedded server. You will need to install this package to use any of those\nMariaDB packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/mariadb-errmsg@10.11.18-1.oe2403sp4?arch=x86_64&epoch=4&upstream=mariadb-10.11.18-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://mariadb.org",
      "licenseDeclared": "GPLv2 and LGPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The error messages files required by server and embedded",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "4:10.11.18-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.5.6",
      "name": "openssl-libs",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c8c19a74b9e9791bab592e1e581bbcdf43a5e8d05a705ecd6acd3cc2c130ce17"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.5.6-4.oe2403sp4?arch=x86_64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.5.6-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-pam-1.5.3",
      "name": "pam",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "862fc5658687c13e5c1c73a17c210193c91e1350e96329c5f09dbfc6d4992902"
        }
      ],
      "description": "PAM (Pluggable Authentication Modules) is a system of libraries that\nhandle the authentication tasks of applications (services) on the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pam@1.5.3-11.oe2403sp4?arch=x86_64&epoch=0&upstream=pam-1.5.3-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.linux-pam.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Pluggable Authentication Modules for Linux",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.3-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-pcre2-10.42",
      "name": "pcre2",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8a2dca652c51fd1f98594f43db51e190b34a89ee64bfc2f388a77d1321bc5f61"
        }
      ],
      "description": "PCRE2 is a re-working of the original PCRE1 library to provide an entirely new\nAPI. Since its initial release in 2015, there has been further development of\nthe code and it now differs from PCRE1 in more than just the API.\nPCRE2 is written in C, and it has its own API. There are three sets of\nfunctions, one for the 8-bit library, which processes strings of bytes, one for\nthe 16-bit library, which processes strings of 16-bit values, and one for the\n32-bit library, which processes strings of 32-bit values. Unlike PCRE1, there\nare no C++ wrappers.\n\nThe distribution does contain a set of C wrapper functions for the 8-bit\nlibrary that are based on the POSIX regular expression API (see the pcre2posix\nman page). These are built into a library called libpcre2-posix. Note that this\njust provides a POSIX calling interface to PCRE2; the regular expressions\nthemselves still follow Perl syntax and semantics. The POSIX API is restricted,\nand does not give full access to all of PCRE2's facilities.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pcre2@10.42-14.oe2403sp4?arch=x86_64&epoch=0&upstream=pcre2-10.42-14.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.pcre.org/",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Perl Compatible Regular Expressions",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:10.42-14.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-psmisc-23.6",
      "name": "psmisc",
      "licenseConcluded": "GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "868fd5da634ccead22ab369e11f13cb45630821f99a77abbc57c5d4a30a04599"
        }
      ],
      "description": "This PSmisc package is a set of some small useful utilities that use the proc\nfilesystem. We're not about changing the world, but providing the system\nadministrator with some help in common tasks.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/psmisc@23.6-2.oe2403sp4?arch=x86_64&epoch=0&upstream=psmisc-23.6-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.com/psmisc/psmisc",
      "licenseDeclared": "GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Utilities for managing processes on your system",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:23.6-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-255",
      "name": "systemd",
      "licenseConcluded": "MIT and LGPLv2+ and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "89f5edaaa311232be2073ac7b29b8ab0c247168cfb820f63f5c52f8daf8ccdc9"
        }
      ],
      "description": "systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "MIT and LGPLv2+ and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "System and Service Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-59.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-systemd-libs-255",
      "name": "systemd-libs",
      "licenseConcluded": "LGPLv2+ and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b3dcafdf1560755cf4b2937271d1f2c44c09a57e670c980551917912e708209a"
        }
      ],
      "description": "Libraries for systemd and udev.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/systemd-libs@255-59.oe2403sp4?arch=x86_64&epoch=0&upstream=systemd-255-59.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://systemd.io/",
      "licenseDeclared": "LGPLv2+ and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "systemd libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:255-59.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-libs-5.4.7",
      "name": "xz-libs",
      "licenseConcluded": "GPL-3.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6a4bce47e9a22dc0dd94bf765d6b49f710e5d320c9e3f7ff9e48f90f12cbbc94"
        }
      ],
      "description": "Libraries for decoding files compressed with LZMA or XZ utils.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz-libs@5.4.7-8.oe2403sp4?arch=x86_64&epoch=0&upstream=xz-5.4.7-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz",
      "licenseDeclared": "GPL-3.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Libraries for xz",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.7-8.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dbb93ba5bcc987d252b148c30b5ffc4dc054b3c59ef0adcfcdecdc3ca2014514"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bzip2-1.0.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-iproute-6.6.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libaio-0.3.113"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcurl-8.4.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-liburing-2.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libxcrypt-4.4.36"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-lz4-1.9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-lzo-2.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-mariadb-10.11.18"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-mariadb-common-10.11.18"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-mariadb-config-10.11.18"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-mariadb-errmsg-10.11.18"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.5.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pam-1.5.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pcre2-10.42"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-psmisc-23.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-systemd-libs-255"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-libs-5.4.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mariadb-server-10.11.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
