{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "openssh-clients-0.9.3p2-3.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-15T06:57:53.750891916Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/openssh-clients-0.9.3p2-3.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-bash-5.2.15",
      "name": "bash",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7efac69f54416b21bdc1d052bee86bc9193d2889fb299a5c97224fe4ba7ccf7a"
        }
      ],
      "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bash@5.2.15-9.oe2403?arch=x86_64&epoch=0&upstream=bash-5.2.15-9.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/bash",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "It is the Bourne Again Shell",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.15-9.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9a93e8ae2c255bbb13eaa3b57ea17ef5f753be5cf64b617630d2b07edce125d8"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-3.oe2403?arch=x86_64&epoch=0&upstream=coreutils-9.4-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-crypto-policies-20230614",
      "name": "crypto-policies",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f563a8eecb42fc095a2228d4bf2d3fed121ae4e8316abc2d5637e3581fa2899b"
        }
      ],
      "description": "This package provides update-crypto-policies, which is a tool that sets\nthe policy applicable for the various cryptographic back-ends, such as\nSSL/TLS libraries. The policy set by the tool will be the default policy\nused by these back-ends unless the application user configures them otherwise.\nhttps://fedoraproject.org/wiki/Changes/CryptoPolicy",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/crypto-policies@20230614-2.git5f3458e.oe2403?arch=noarch&epoch=0&upstream=crypto-policies-20230614-2.git5f3458e.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gitlab.com/redhat-crypto/fedora-crypto-policies",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Crypto policies package for Fedora",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:20230614-2.git5f3458e.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1da3351aa7403c603949d381b7c30ea80598cb9cdf9ae0206816118e9b566939"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-29.oe2403?arch=x86_64&epoch=0&upstream=glibc-2.38-29.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-29.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-krb5-libs-1.21.2",
      "name": "krb5-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "26209238dc48742318ce7f7b3f6ed5809856a36aef44822ec48efd6d8dcd6d1c"
        }
      ],
      "description": "This package contains the shared libraries needed by Kerberos 5.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/krb5-libs@1.21.2-2.oe2403?arch=x86_64&epoch=0&upstream=krb5-1.21.2-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://web.mit.edu/kerberos/www/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "The non-admin shared libraries used by Kerberos 5",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.21.2-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libedit-3.1",
      "name": "libedit",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9e850ce4a88f5d345521c7d1c7bf0899b2890a299f74785a1349f20ce8ce9fc9"
        }
      ],
      "description": "Libedit is the automatic tool and libtoolized port of the NetBSD Editline library.\nIt provides generic line editing, history, and markup functions similar to\nthose in GNU Readline.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libedit@3.1-31.oe2403?arch=x86_64&epoch=0&upstream=libedit-3.1-31.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.thrysoee.dk/editline/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "The NetBSD Editline library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.1-31.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libselinux-3.5",
      "name": "libselinux",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "edeadb66f82bfdb7a0779b13acef46ba7754ed0f4f574b8c8d2113f090f16cf0"
        }
      ],
      "description": "libselinux provides an interface to get and set process and file\nsecurity contexts and to obtain security policy decisions.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libselinux@3.5-3.oe2403?arch=x86_64&epoch=0&upstream=libselinux-3.5-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/SELinuxProject/selinux/wiki",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "SELinux library and simple utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.5-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssh-9.3p2",
      "name": "openssh",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e7a35e17cd1b2d83e13afce3ffd3a9564a086e603fde8218d35e72cebd30fabc"
        }
      ],
      "description": "OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\\nIt encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\\nother attacks. In addition, OpenSSH provides a large suite of secure tunneling \\\ncapabilities, several authentication methods, and sophisticated configuration options.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssh@9.3p2-3.oe2403?arch=x86_64&epoch=0&upstream=openssh-9.3p2-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.openssh.com/portable.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "An open source implementation of SSH protocol version 2",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.3p2-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.0.12",
      "name": "openssl-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f030909bbdf0b70fe2fbd96b64ec5f599c79c08dc99b401e9f5d27d3683e21f3"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.0.12-5.oe2403?arch=x86_64&epoch=1&upstream=openssl-3.0.12-5.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.0.12-5.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f71c47cc1a4a0c74aabc1c35b0c451f59b933a0f8b419a413614037bfccef773"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-2.oe2403?arch=x86_64&epoch=0&upstream=zlib-1.2.13-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-2.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-openssh-clients-9.3p2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-clients-9.3p2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-clients-9.3p2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-crypto-policies-20230614"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-clients-9.3p2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-clients-9.3p2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-krb5-libs-1.21.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-clients-9.3p2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libedit-3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-clients-9.3p2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libselinux-3.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-clients-9.3p2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssh-9.3p2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-clients-9.3p2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.0.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openssh-clients-9.3p2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}