{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "clamav-update-0.1.0.9-5.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/clamav-update-0.1.0.9-5.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-clamav-update-1.0.9",
      "name": "clamav-update",
      "licenseConcluded": "GPL-2.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1bd1bc86c45b891bf3fdd8ca8017e83acb5fcde5bfaf9f7207969e746b3bea36"
        }
      ],
      "description": "The clamav-update package contains programs which can be used to update\nthe clamav anti-virus database automatically. It uses the freshclam(1)\nutility for this task. Use this package when you go updating the virus\ndatabase regulary and do not want to download a >120MB sized rpm-package\nwith outdated virus definitions.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/clamav-update@1.0.9-5.oe2403sp4?arch=x86_64&epoch=0&upstream=clamav-1.0.9-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.clamav.net/",
      "licenseDeclared": "GPL-2.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Auto-updater for the Clam Antivirus scanner data-files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.9-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bash-5.2.15",
      "name": "bash",
      "licenseConcluded": "GPLv3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a980f85dfb01951730f94f5537d836d925d5e23cafc786f2e63f0087f69e1d93"
        }
      ],
      "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/bash",
      "licenseDeclared": "GPLv3",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "It is the Bourne Again Shell",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.15-19.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-clamav-1.0.9",
      "name": "clamav",
      "licenseConcluded": "GPL-2.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "827aa76a49aff876406b0f4f0024af8b535891c238090fe498aa600f17a04742"
        }
      ],
      "description": "\nClam AntiVirus (clamav) is an open source antivirus engine for detecting trojans,\nviruses, malware & other malicious threats. The main purpose of this software is\nthe integration with mail servers (attachment scanning). The package provides a\nflexible and scalable multi-threaded daemon, a command line scanner, and a tool\nfor automatic updating via Internet. The programs are based on a shared library\ndistributed with the Clam AntiVirus package, which you can use with your own software.\nhe virus database is based on the virus database from OpenAntiVirus, but contains\nadditional signatures and is KEPT UP TO DATE.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/clamav@1.0.9-5.oe2403sp4?arch=x86_64&epoch=0&upstream=clamav-1.0.9-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.clamav.net/",
      "licenseDeclared": "GPL-2.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "End-user tools for the Clam Antivirus scanner",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.9-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-clamav-filesystem-1.0.9",
      "name": "clamav-filesystem",
      "licenseConcluded": "GPL-2.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6061c178d02514be0468af919e75269bc8884722c03ac29f8fbe8f33eaad9c28"
        }
      ],
      "description": "The clamav-filesystem package provides the filesystem structure and\ncontains the user-creation scripts required by clamav.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/clamav-filesystem@1.0.9-5.oe2403sp4?arch=noarch&epoch=0&upstream=clamav-1.0.9-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.clamav.net/",
      "licenseDeclared": "GPL-2.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Filesystem structure for clamav",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.9-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "433e473f0f3e48029a50a63e45680e5ae03a29789cc26d8952d691ea388b3b62"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-22.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-cronie-1.6.1",
      "name": "cronie",
      "licenseConcluded": "GPLv2+ and ISC",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5e9cc7db49698b932ece56c1d46770b4b87a616f02be7d736aa18788ec68d2ab"
        }
      ],
      "description": "Cronie contains the standard UNIX daemon crond that runs specified programs\nat scheduled times and related tools. It is based on the original cron and\nhas security and configuration enhancements like the ability to use pam and SELinux.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/cronie@1.6.1-6.oe2403sp4?arch=x86_64&epoch=0&upstream=cronie-1.6.1-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/cronie-crond/cronie",
      "licenseDeclared": "GPLv2+ and ISC",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Standard UNIX daemon crond",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.6.1-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-crontabs-1.11",
      "name": "crontabs",
      "licenseConcluded": "Public Domain and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f5c75ce41919d5d1bec6e4e7c52494112142b5455c852cfadc575cb1dc391c20"
        }
      ],
      "description": "A crontab file contains instructions to the cron daemon\nof the general form: 'run this command at  this  time  on\nthis  date'.   Each  user has their own crontab, and com-\nmands in any given crontab will be executed  as  the  user\nwho  owns  the  crontab.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/crontabs@1.11-24.oe2403sp4?arch=noarch&epoch=0&upstream=crontabs-1.11-24.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/cronie-crond/crontabs",
      "licenseDeclared": "Public Domain and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Root crontab files used to schedule the execution of programs",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.11-24.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b136cc1d6c94e7df3b522b541c89c22084f0ce440f1b9714ed930f664b10ea04"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libcurl-8.4.0",
      "name": "libcurl",
      "licenseConcluded": "curl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "770cd5a6c6bfb3c08b1a9610375e2f421679b9783d6937a0021fdab3f74cf4c8"
        }
      ],
      "description": "A library for getting files from web servers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libcurl@8.4.0-30.oe2403sp4?arch=x86_64&epoch=0&upstream=curl-8.4.0-30.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://curl.se/",
      "licenseDeclared": "curl",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A library for getting files from web servers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.4.0-30.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-libgcc-12.3.1",
      "name": "libgcc",
      "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "092db224576930eedd234726562459f564bb59dda6c5eca2b004d8abdecc8a2c"
        }
      ],
      "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libgcc@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gcc.gnu.org",
      "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "GCC version 12 shared support library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:12.3.1-110.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-libs-3.5.6",
      "name": "openssl-libs",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c8c19a74b9e9791bab592e1e581bbcdf43a5e8d05a705ecd6acd3cc2c130ce17"
        }
      ],
      "description": "The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl-libs@3.5.6-4.oe2403sp4?arch=x86_64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A general purpose cryptography library with TLS implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.5.6-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dbb93ba5bcc987d252b148c30b5ffc4dc054b3c59ef0adcfcdecdc3ca2014514"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp4?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-clamav-update-1.0.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15"
    },
    {
      "spdxElementId": "SPDXRef-rpm-clamav-update-1.0.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-clamav-1.0.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-clamav-update-1.0.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-clamav-filesystem-1.0.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-clamav-update-1.0.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-clamav-update-1.0.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-cronie-1.6.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-clamav-update-1.0.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-crontabs-1.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-clamav-update-1.0.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-clamav-update-1.0.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libcurl-8.4.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-clamav-update-1.0.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-clamav-update-1.0.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-libs-3.5.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-clamav-update-1.0.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}