{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"clamav-0.0.103.12-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/clamav-0.0.103.12-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bzip2-1.0.8-5dc62b0f-a874-40a6-a309-f6de98a638c2-892dc01b-907c-4338-8c9a-838577fdaab2",
			"name":"bzip2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"01489c08d9921a6c60c57c90b84c8d11fc02c1860f45c6f009bf535704baa64c"
				}
			],
			"description":"bzip2 is a freely available, patent free, high-quality data compressor.\nIt typically compresses files to within 10% to 15% of the best available\ntechniques (the PPM family of statistical compressors), whilst being\naround twice as fast at compression and six times faster at decompression.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bzip2@1.0.8-8.oe2409?arch=aarch64&epoch=0&upstream=bzip2-1.0.8-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.sourceware.org/bzip2/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A high-quality data compressor",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.0.8-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-clamav-data-0.103.12-303b440c-8550-4e32-97dd-590d7268ce8d-4fc03003-9a13-4f32-b559-a082ff1a435e",
			"name":"clamav-data",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"51d4cebbe051477e12bd9a4b7bd25bf051632529b4e515e9cb20d383bd1a2281"
				}
			],
			"description":"The clamav-data package contains the virus-database needed by clamav.\nThis database should be updated regularly; Use this package when you\nwant a working (but perhaps outdated) virus scanner immediately after\npackage installation.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/clamav-data@0.103.12-1.oe2409?arch=noarch&epoch=0&upstream=clamav-0.103.12-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.clamav.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Virus signature data for the Clam Antivirus scanner",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.103.12-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-clamav-update-0.103.12-9eb113f5-50ae-41d5-944b-00aa0044d77d-1f59fd00-139c-4088-9083-23e94097857b",
			"name":"clamav-update",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"db3e7d10aa86fb98ffed6dd8c746348344e6d316d915cac880f489185c7b68fa"
				}
			],
			"description":"The clamav-update package contains programs which can be used to update\nthe clamav anti-virus database automatically. It uses the freshclam(1)\nutility for this task. Use this package when you go updating the virus\ndatabase regulary and do not want to download a >120MB sized rpm-package\nwith outdated virus definitions.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/clamav-update@0.103.12-1.oe2409?arch=aarch64&epoch=0&upstream=clamav-0.103.12-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.clamav.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Auto-updater for the Clam Antivirus scanner data-files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.103.12-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-25bf51b0-a0db-4aa4-abdb-2da1f7c5e82b",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-json-c-0.17-e035c68f-ec92-4b08-92d0-cbaf51612103-a0e1ed4b-a20b-4591-85ea-94f6082e1bfc",
			"name":"json-c",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a097297c8c2dcd0d761f3762140929837eb38fa73864e8c8435bc3bcaa104564"
				}
			],
			"description":"JSON-C implements a reference counting object model that allows you\nto easily construct JSON objects in C, output them as JSON formatted\nstrings and parse JSON formatted strings back into the C representation\nof JSON objects.  It aims to conform to RFC 7159.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/json-c@0.17-3.oe2409?arch=aarch64&epoch=0&upstream=json-c-0.17-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/json-c/json-c",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"JSON implementation in C",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.17-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-9ad68f6c-ede2-4823-bb94-a73f67d99cdd",
			"name":"libcurl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8a4146b16a44d1cb6dc77162ee1c9bec31aca0454e89eb870073c3f2d27ac553"
				}
			],
			"description":"A library for getting files from web servers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libcurl@8.4.0-10.oe2409?arch=aarch64&epoch=0&upstream=curl-8.4.0-10.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://curl.se/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library for getting files from web servers",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.4.0-10.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libtool-ltdl-2.4.7-7ad7f31b-6515-417e-a2e2-a169bedc3241-749148f5-f83d-4601-be42-6da0dac8add3",
			"name":"libtool-ltdl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"66598e87d516548af2b124d1827c828b54a233ad96c11806126c06f93e858ca2"
				}
			],
			"description":"The libtool-ltdl package contains the GNU Libtool Dynamic Module Loader, a\nlibrary that provides a consistent, portable interface which simplifies the\nprocess of using dynamic modules.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libtool-ltdl@2.4.7-3.oe2409?arch=aarch64&epoch=0&upstream=libtool-2.4.7-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/libtool/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Runtime libraries for GNU Libtool Dynamic Module Loader",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.4.7-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxml2-2.12.6-0c08664b-ea3e-43dc-8239-d814370a1088-5dd30d77-0850-42ed-af1e-d993d750b2ce",
			"name":"libxml2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"47e299fcb5cdfb5396dfb3180cf7878e71646a2e7eeca258bf0875f8d96c00dd"
				}
			],
			"description":"This library allows to manipulate XML files. It includes support\nto read, modify and write XML and HTML files. There is DTDs support\nthis includes parsing and validation even with complex DtDs, either\nat parse time or later once the document has been modified. The output\ncan be a simple SAX stream or and in-memory DOM like representations.\nIn this case one can use the built-in XPath and XPointer implementation\nto select sub nodes or ranges. A flexible Input/Output mechanism is\navailable, with existing HTTP and FTP modules and combined to an\nURI library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxml2@2.12.6-3.oe2409?arch=aarch64&epoch=0&upstream=libxml2-2.12.6-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://xmlsoft.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library providing XML and HTML support",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.12.6-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-ncurses-libs-6.4-94dbc1a9-0c87-45e6-a9db-b8a6a2acc674-c4abeaaf-6468-4532-a58d-48d6179e20f8",
			"name":"ncurses-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"36fe3ab09be75524eb8fddf9afa3581a65f9f6c643441af42f5938f7ba45e9ce"
				}
			],
			"description":"Libraries for ncurses.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/ncurses-libs@6.4-8.oe2409?arch=aarch64&epoch=0&upstream=ncurses-6.4-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://invisible-island.net/ncurses/ncurses.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libraries for ncurses",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:6.4-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-5f69be74-ae65-4ce5-835a-4d56861c24cc",
			"name":"openssl-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fe8a21dc03d6c950264c4aa621ea0c4145da06ac2541c987a442ec2c8af13cfe"
				}
			],
			"description":"The openssl-libs package contains the libraries that are used\nby various applications which support cryptographic algorithms\nand protocols.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/openssl-libs@3.0.12-8.oe2409?arch=aarch64&epoch=1&upstream=openssl-3.0.12-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.openssl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A general purpose cryptography library with TLS implementation",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:3.0.12-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-pcre2-10.42-90b15ffe-b336-4085-8114-08d343102ad7-77747a00-6929-4cf0-b8cd-fb326a583c73",
			"name":"pcre2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"63b16a0eebb21b4266321ddd621236057efc7045b85cfe771148d2629b89eb8d"
				}
			],
			"description":"PCRE2 is a re-working of the original PCRE1 library to provide an entirely new\nAPI. Since its initial release in 2015, there has been further development of\nthe code and it now differs from PCRE1 in more than just the API.\nPCRE2 is written in C, and it has its own API. There are three sets of\nfunctions, one for the 8-bit library, which processes strings of bytes, one for\nthe 16-bit library, which processes strings of 16-bit values, and one for the\n32-bit library, which processes strings of 32-bit values. Unlike PCRE1, there\nare no C++ wrappers.\n\nThe distribution does contain a set of C wrapper functions for the 8-bit\nlibrary that are based on the POSIX regular expression API (see the pcre2posix\nman page). These are built into a library called libpcre2-posix. Note that this\njust provides a POSIX calling interface to PCRE2; the regular expressions\nthemselves still follow Perl syntax and semantics. The POSIX API is restricted,\nand does not give full access to all of PCRE2's facilities.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/pcre2@10.42-9.oe2409?arch=aarch64&epoch=0&upstream=pcre2-10.42-9.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.pcre.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Perl Compatible Regular Expressions",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:10.42-9.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-c41cfe2f-ec05-4f26-a903-38f16b922815",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-clamav-0.103.12-392ec312-78ab-40bf-9f39-518cc99238c3",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bzip2-1.0.8-5dc62b0f-a874-40a6-a309-f6de98a638c2-892dc01b-907c-4338-8c9a-838577fdaab2"
		},
		{
			"spdxElementId":"SPDXRef-rpm-clamav-0.103.12-392ec312-78ab-40bf-9f39-518cc99238c3",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-clamav-data-0.103.12-303b440c-8550-4e32-97dd-590d7268ce8d-4fc03003-9a13-4f32-b559-a082ff1a435e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-clamav-0.103.12-392ec312-78ab-40bf-9f39-518cc99238c3",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-clamav-update-0.103.12-9eb113f5-50ae-41d5-944b-00aa0044d77d-1f59fd00-139c-4088-9083-23e94097857b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-clamav-0.103.12-392ec312-78ab-40bf-9f39-518cc99238c3",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-25bf51b0-a0db-4aa4-abdb-2da1f7c5e82b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-clamav-0.103.12-392ec312-78ab-40bf-9f39-518cc99238c3",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-json-c-0.17-e035c68f-ec92-4b08-92d0-cbaf51612103-a0e1ed4b-a20b-4591-85ea-94f6082e1bfc"
		},
		{
			"spdxElementId":"SPDXRef-rpm-clamav-0.103.12-392ec312-78ab-40bf-9f39-518cc99238c3",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libcurl-8.4.0-dd1f7e12-03ac-4061-a30b-892fc15353db-9ad68f6c-ede2-4823-bb94-a73f67d99cdd"
		},
		{
			"spdxElementId":"SPDXRef-rpm-clamav-0.103.12-392ec312-78ab-40bf-9f39-518cc99238c3",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libtool-ltdl-2.4.7-7ad7f31b-6515-417e-a2e2-a169bedc3241-749148f5-f83d-4601-be42-6da0dac8add3"
		},
		{
			"spdxElementId":"SPDXRef-rpm-clamav-0.103.12-392ec312-78ab-40bf-9f39-518cc99238c3",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxml2-2.12.6-0c08664b-ea3e-43dc-8239-d814370a1088-5dd30d77-0850-42ed-af1e-d993d750b2ce"
		},
		{
			"spdxElementId":"SPDXRef-rpm-clamav-0.103.12-392ec312-78ab-40bf-9f39-518cc99238c3",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-ncurses-libs-6.4-94dbc1a9-0c87-45e6-a9db-b8a6a2acc674-c4abeaaf-6468-4532-a58d-48d6179e20f8"
		},
		{
			"spdxElementId":"SPDXRef-rpm-clamav-0.103.12-392ec312-78ab-40bf-9f39-518cc99238c3",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-openssl-libs-3.0.12-cdb45ffd-7c49-4f85-86a4-f448e6eac4c8-5f69be74-ae65-4ce5-835a-4d56861c24cc"
		},
		{
			"spdxElementId":"SPDXRef-rpm-clamav-0.103.12-392ec312-78ab-40bf-9f39-518cc99238c3",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-pcre2-10.42-90b15ffe-b336-4085-8114-08d343102ad7-77747a00-6929-4cf0-b8cd-fb326a583c73"
		},
		{
			"spdxElementId":"SPDXRef-rpm-clamav-0.103.12-392ec312-78ab-40bf-9f39-518cc99238c3",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-c41cfe2f-ec05-4f26-a903-38f16b922815"
		}
	]
}