{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "kpatch-1.0.9.9-10.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-25T18:43:18.866379778Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/kpatch-1.0.9.9-10.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-kpatch-0.9.9",
      "name": "kpatch",
      "licenseConcluded": "GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "37ba4a37b2c09802bb5465d9fee088626ed4139fd2edeaa5e6cb297b61a39ec5"
        }
      ],
      "description": "kpatch is a Linux dynamic kernel patching infrastructure which allows you to patch\na running kernel without rebooting or restarting any processes. It enables sysadmins\nto apply critical security patches to the kernel immediately, without having to wait\nfor long-running tasks to complete, for users to log off, or for scheduled reboot\nwindows. It gives more control over uptime without sacrificing security or stability.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/kpatch@0.9.9-10.oe2403sp1?arch=aarch64&epoch=1&upstream=kpatch-0.9.9-10.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/dynup/kpatch",
      "licenseDeclared": "GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/168fa246962e53d9e0ba8cd4bb51a08b3aef361bac92198bf2677e8950495bf6-primary.sqlite.bz2",
      "summary": "A Linux dynamic kernel patching infrastructure",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:0.9.9-10.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-elfutils-libelf-0.190",
      "name": "elfutils-libelf",
      "licenseConcluded": "GPLv2+ or LGPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "620c5089e6c3d56ded5ae20afae9b328b61f98e82a558e56ca3d5572771864da"
        }
      ],
      "description": "The elfutils-libelf package provides a DSO which allows reading and\nwriting ELF files on a high level.  Third party programs depend on\nthis package to read internals of ELF files.  The programs of the\nelfutils package use it also to generate new ELF files.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/elfutils-libelf@0.190-7.oe2403sp1?arch=aarch64&epoch=0&upstream=elfutils-0.190-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://elfutils.org/",
      "licenseDeclared": "GPLv2+ or LGPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/168fa246962e53d9e0ba8cd4bb51a08b3aef361bac92198bf2677e8950495bf6-primary.sqlite.bz2",
      "summary": "Library to read and write ELF files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.190-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-gcc-12.3.1",
      "name": "gcc",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4d8fa2f2e0b8c2745f72cedc31e84b11a52eee76d4bcf87bf2c3f5ec13632441"
        }
      ],
      "description": "The gcc package contains the GNU Compiler Collection version 12.\nYou'll need this package in order to compile C code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gcc@12.3.1-64.oe2403sp1?arch=aarch64&epoch=0&upstream=gcc-12.3.1-64.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/168fa246962e53d9e0ba8cd4bb51a08b3aef361bac92198bf2677e8950495bf6-primary.sqlite.bz2",
      "summary": "Various compilers (C, C++, Objective-C, ...)",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-64.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2eac576b91f7c5f996a09ed50b523ef670f1eba2b46d32e8493e80ba77f9387c"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/168fa246962e53d9e0ba8cd4bb51a08b3aef361bac92198bf2677e8950495bf6-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-make-4.4.1",
      "name": "make",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3e0a1ec77ef6bcd197fc9de8d0b51a86725dbd8a3a47e84837b2df1a8a2360f2"
        }
      ],
      "description": "GNU Make is a tool which controls the generation of executables and other\nnon-source files of a program from the program's source files.\n\nMake gets its knowledge of how to build your program from a file called\nthe makefile, which lists each of the non-source files and how to compute\nit from other files. When you write a program, you should write a makefile\nfor it, so that it is possible to use Make to build and install the program.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/make@4.4.1-2.oe2403sp1?arch=aarch64&epoch=1&upstream=make-4.4.1-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/make/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/168fa246962e53d9e0ba8cd4bb51a08b3aef361bac92198bf2677e8950495bf6-primary.sqlite.bz2",
      "summary": "A tool which controls the generation of executables and non-source files of a program",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:4.4.1-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-devel-3.0.12",
      "name": "openssl-devel",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0d44222aead00b41e76df380fff79221205ca44b1b87be3ac8f650e31e5063d2"
        }
      ],
      "description": "Development files for openssl.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-devel@3.0.12-22.oe2403sp1?arch=aarch64&epoch=1&upstream=openssl-3.0.12-22.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/168fa246962e53d9e0ba8cd4bb51a08b3aef361bac92198bf2677e8950495bf6-primary.sqlite.bz2",
      "summary": "Development files for openssl",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.0.12-22.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-patch-2.7.6",
      "name": "patch",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "013e4083d04df761b70bd7f9b0642a4dfbedab71a8caf7a492e7eae95f55e479"
        }
      ],
      "description": "Patch takes a patch file containing a difference listing produced by the\ndiff program and applies those differences to one or more original files,\nproducing patched versions.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/patch@2.7.6-23.oe2403sp1?arch=aarch64&epoch=0&upstream=patch-2.7.6-23.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/patch/patch.html",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/168fa246962e53d9e0ba8cd4bb51a08b3aef361bac92198bf2677e8950495bf6-primary.sqlite.bz2",
      "summary": "Utiliity which applies a patch file to original files.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.7.6-23.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-kpatch-0.9.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-elfutils-libelf-0.190"
    },
    {
      "spdxElementId": "SPDXRef-rpm-kpatch-0.9.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-kpatch-0.9.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-kpatch-0.9.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-make-4.4.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-kpatch-0.9.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-devel-3.0.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-kpatch-0.9.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-patch-2.7.6"
    }
  ]
}