{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "libcurl-0.8.4.0-11.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-16T13:59:12.772799911Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/libcurl-0.8.4.0-11.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-brotli-1.1.0",
      "name": "brotli",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3f761d648fc2d9fb47875e81fe0193313a0f57cec50396571b1777b1ed3a7655"
        }
      ],
      "description": "Brotli is a generic-purpose lossless compression algorithm that compresses\ndata using a combination of a modern variant of the LZ77 algorithm, Huffman\ncoding and 2nd order context modeling, with a compression ratio comparable\nto the best currently available general-purpose compression methods.\nIt is similar in speed with deflate but offers more dense compression.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/brotli@1.1.0-2.oe2403?arch=x86_64&epoch=0&upstream=brotli-1.1.0-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/google/brotli",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "Lossless compression algorithm",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.0-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9c9d46dff23e85b1a909276e9dfa93ea5c35b9fa788ba716e1634854f582059e"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-krb5-libs-1.21.2",
      "name": "krb5-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ffccd8dacff6275d8eb4a5d6d7838fb41c0959b1e9fa600c362132593a27ad58"
        }
      ],
      "description": "This package contains the shared libraries needed by Kerberos 5.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/krb5-libs@1.21.2-11.oe2403?arch=x86_64&epoch=0&upstream=krb5-1.21.2-11.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://web.mit.edu/kerberos/www/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "The non-admin shared libraries used by Kerberos 5",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.21.2-11.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libnghttp2-1.58.0",
      "name": "libnghttp2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1be12c84ae91b84a5b20513889ef2fcc82aec8dfe29e29cbc34e9d503887c3c4"
        }
      ],
      "description": "libnghttp2 is a library implementing HTTP/2 protocol in C.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libnghttp2@1.58.0-3.oe2403?arch=x86_64&epoch=0&upstream=nghttp2-1.58.0-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://nghttp2.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "nghttp2 - HTTP/2 C Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.58.0-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-libssh-0.10.5",
      "name": "libssh",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "07742589cbe03afec00909b53a3e2b4b0ae88944093f67fec4bba756b770a02d"
        }
      ],
      "description": "The ssh library was designed to be used by programmers needing a working SSH\nimplementation by the mean of a library. The complete control of the client is\nmade by the programmer. With libssh, you can remotely execute programs, transfer\nfiles, use a secure and transparent tunnel for your remote programs. With its\nSecure FTP implementation, you can play with remote files easily, without\nthird-party programs others than libcrypto (from openssl).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libssh@0.10.5-10.oe2403?arch=x86_64&epoch=0&upstream=libssh-0.10.5-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.libssh.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "A library implementing the SSH protocol",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.10.5-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-openldap-2.6.5",
      "name": "openldap",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "71b2e0ff6e623f6691c251c2bb85c08c8900c7075c1d63966432d5093aab9ce9"
        }
      ],
      "description": "OpenLDAP is an open source suite of LDAP (Lightweight Directory Access\nProtocol) applications and development tools. LDAP is a set of\nprotocols for accessing directory services (usually phone book style\ninformation, but other information is possible) over the Internet,\nsimilar to the way DNS (Domain Name System) information is propagated\nover the Internet. The openldap package contains configuration files,\nlibraries, and documentation for OpenLDAP.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openldap@2.6.5-6.oe2403?arch=x86_64&epoch=0&upstream=openldap-2.6.5-6.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openldap.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "LDAP support libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.6.5-6.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.0.12",
      "name": "openssl-libs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "11ff6447fa7e838070569b85e08bf2a09e44b3d63a6fffbd572f1443bf1debd5"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.0.12-10.oe2403?arch=x86_64&epoch=1&upstream=openssl-3.0.12-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.0.12-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3c94812056316ee01734063034dd81b8f8efb396fbffa759074a5d7339229ef2"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-libcurl-8.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-brotli-1.1.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libcurl-8.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libcurl-8.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-krb5-libs-1.21.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libcurl-8.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libnghttp2-1.58.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libcurl-8.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libssh-0.10.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libcurl-8.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openldap-2.6.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libcurl-8.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.0.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-libcurl-8.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}
