{ "SPDXID": "SPDXRef-DOCUMENT", "name": "java-latest-openjdk-1.26.0.2.1.1-0.oe2403sp3.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-10-24T17:54:24.953569801Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/java-latest-openjdk-1.26.0.2.1.1-0.oe2403sp3.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-java-latest-openjdk-26.0.2.1.1", "name": "java-latest-openjdk", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "2e4756d67a34d8bb270989bbe565370b950ac07c1bcb2a43d09bfccd179c3600" } ], "description": "The OpenJDK runtime environment.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-latest-openjdk@26.0.2.1.1-0.oe2403sp3?arch=x86_64&epoch=1&upstream=java-latest-openjdk-26.0.2.1.1-0.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "sourceInfo": "acquired package info from repodata DB: repodata/93a467aabf111e1d1c5db961dd12c1c92490cb204f1556f2acf78b9adb913bf4-primary.sqlite.bz2", "summary": "OpenJDK Runtime Environment 26", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:26.0.2.1.1-0.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-coreutils-9.4", "name": "coreutils", "licenseConcluded": "GPLv3+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "3b39774c9c9188f42549b0190c61a1682bdf185131f78711be6f218a159674f0" } ], "description": "These are the GNU core utilities. This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/coreutils@9.4-23.oe2403sp3?arch=x86_64&epoch=0&upstream=coreutils-9.4-23.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gnu.org/software/coreutils/", "licenseDeclared": "GPLv3+", "sourceInfo": "acquired package info from repodata DB: repodata/93a467aabf111e1d1c5db961dd12c1c92490cb204f1556f2acf78b9adb913bf4-primary.sqlite.bz2", "summary": "A set of basic GNU tools commonly used in shell scripts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:9.4-23.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-giflib-5.2.2", "name": "giflib", "licenseConcluded": "MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "3fe67482a8cb945758a1b265c5c0217e3c8509c8f24c55f8123f733271477e67" } ], "description": "giflib is a library of gif images and provides utilities for processing images.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/giflib@5.2.2-3.oe2403sp3?arch=x86_64&epoch=0&upstream=giflib-5.2.2-3.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.sourceforge.net/projects/giflib/", "licenseDeclared": "MIT", "sourceInfo": "acquired package info from repodata DB: repodata/93a467aabf111e1d1c5db961dd12c1c92490cb204f1556f2acf78b9adb913bf4-primary.sqlite.bz2", "summary": "A library and utilities for processing GIFs", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.2.2-3.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-glibc-2.38", "name": "glibc", "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "checksums": [ { "algorithm": "SHA256", "checksumValue": "5b9ff7dcfad4f84b7de1d2f196b2ea0b7976510cb9db329bdfc1d6cfd5b8d730" } ], "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp3?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.gnu.org/software/glibc/", "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "sourceInfo": "acquired package info from repodata DB: repodata/93a467aabf111e1d1c5db961dd12c1c92490cb204f1556f2acf78b9adb913bf4-primary.sqlite.bz2", "summary": "The GNU libc libraries", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.38-101.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-java-latest-openjdk-headless-26.0.2.1.1", "name": "java-latest-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "f0912adaaacd0e14e267ebcd71d7ae768676bd685aa79fbe0e995d0ccc350cd7" } ], "description": "The OpenJDK runtime environment 26 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-latest-openjdk-headless@26.0.2.1.1-0.oe2403sp3?arch=x86_64&epoch=1&upstream=java-latest-openjdk-26.0.2.1.1-0.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/9b948c2b7d400f242f1cf43f19b43dd17782060f@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "sourceInfo": "acquired package info from repodata DB: repodata/93a467aabf111e1d1c5db961dd12c1c92490cb204f1556f2acf78b9adb913bf4-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 26", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:26.0.2.1.1-0.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-libX11-1.8.7", "name": "libX11", "licenseConcluded": "MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "23d3be9dd56ea14c4cb541fd4a3a65ffc731c1a37d909fb47310d2e8c2c794cc" } ], "description": "Core X11 protocol client library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libX11@1.8.7-4.oe2403sp3?arch=x86_64&epoch=0&upstream=libX11-1.8.7-4.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.x.org", "licenseDeclared": "MIT", "sourceInfo": "acquired package info from repodata DB: repodata/93a467aabf111e1d1c5db961dd12c1c92490cb204f1556f2acf78b9adb913bf4-primary.sqlite.bz2", "summary": "Core X11 protocol client library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.8.7-4.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-libXi-1.8.1", "name": "libXi", "licenseConcluded": "MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "2f33d079841a647efd4412be18301d28f57b60e8ac8cb39e6cbb57e8bdaf5b49" } ], "description": "libXi is the client-side library for the X Input Extension.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libXi@1.8.1-4.oe2403sp3?arch=x86_64&epoch=0&upstream=libXi-1.8.1-4.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gitlab.freedesktop.org/xorg/lib/libxi", "licenseDeclared": "MIT", "sourceInfo": "acquired package info from repodata DB: repodata/93a467aabf111e1d1c5db961dd12c1c92490cb204f1556f2acf78b9adb913bf4-primary.sqlite.bz2", "summary": "X.Org X11 libXi runtime library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.8.1-4.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-libXrender-0.9.11", "name": "libXrender", "licenseConcluded": "MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "115dcb274dda4d70371dccbc1355530bd84502e786f6e85e6562f27e0b5a69cf" } ], "description": "X.Org X11 libXrender runtime library", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libXrender@0.9.11-2.oe2403sp3?arch=x86_64&epoch=0&upstream=libXrender-0.9.11-2.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.x.org", "licenseDeclared": "MIT", "sourceInfo": "acquired package info from repodata DB: repodata/93a467aabf111e1d1c5db961dd12c1c92490cb204f1556f2acf78b9adb913bf4-primary.sqlite.bz2", "summary": "X.Org X11 libXrender runtime library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:0.9.11-2.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-libXtst-1.2.4", "name": "libXtst", "licenseConcluded": "MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "418240885b6da0921ebad16bf6ed4d1f766e077c489b5b34bbcbe1df327fb1af" } ], "description": "X.Org X11 libXtst runtime library", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libXtst@1.2.4-3.oe2403sp3?arch=x86_64&epoch=0&upstream=libXtst-1.2.4-3.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.x.org", "licenseDeclared": "MIT", "sourceInfo": "acquired package info from repodata DB: repodata/93a467aabf111e1d1c5db961dd12c1c92490cb204f1556f2acf78b9adb913bf4-primary.sqlite.bz2", "summary": "X.Org X11 libXtst runtime library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.2.4-3.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-libpng-1.6.40", "name": "libpng", "licenseConcluded": "Zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "c24c67af6c3afac238052744c119768b87394594c9086d42a35c0a0e6778797b" } ], "description": "The libpng package contains libraries used by other programs for reading and writing PNG format files.\nThe PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF,\nwith many improvements and extensions and lack of patent problems.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libpng@1.6.40-12.oe2403sp3?arch=x86_64&epoch=2&upstream=libpng-1.6.40-12.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.libpng.org/pub/png/libpng.html", "licenseDeclared": "Zlib", "sourceInfo": "acquired package info from repodata DB: repodata/93a467aabf111e1d1c5db961dd12c1c92490cb204f1556f2acf78b9adb913bf4-primary.sqlite.bz2", "summary": "A library of functions for manipulating PNG image format files", "supplier": "Organization: http://openeuler.org", "versionInfo": "2:1.6.40-12.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-zlib-1.2.13", "name": "zlib", "licenseConcluded": "zlib and Boost", "checksums": [ { "algorithm": "SHA256", "checksumValue": "5e8398c87da1ae6ca0f5417dccfed134392bbbb4d396bc22a3b3aa0a9aec91d8" } ], "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp3?arch=x86_64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.zlib.net", "licenseDeclared": "zlib and Boost", "sourceInfo": "acquired package info from repodata DB: repodata/93a467aabf111e1d1c5db961dd12c1c92490cb204f1556f2acf78b9adb913bf4-primary.sqlite.bz2", "summary": "A lossless data-compression library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.2.13-5.oe2403sp3" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-java-latest-openjdk-26.0.2.1.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4" }, { "spdxElementId": "SPDXRef-rpm-java-latest-openjdk-26.0.2.1.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-giflib-5.2.2" }, { "spdxElementId": "SPDXRef-rpm-java-latest-openjdk-26.0.2.1.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38" }, { "spdxElementId": "SPDXRef-rpm-java-latest-openjdk-26.0.2.1.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-latest-openjdk-headless-26.0.2.1.1" }, { "spdxElementId": "SPDXRef-rpm-java-latest-openjdk-26.0.2.1.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libX11-1.8.7" }, { "spdxElementId": "SPDXRef-rpm-java-latest-openjdk-26.0.2.1.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libXi-1.8.1" }, { "spdxElementId": "SPDXRef-rpm-java-latest-openjdk-26.0.2.1.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libXrender-0.9.11" }, { "spdxElementId": "SPDXRef-rpm-java-latest-openjdk-26.0.2.1.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libXtst-1.2.4" }, { "spdxElementId": "SPDXRef-rpm-java-latest-openjdk-26.0.2.1.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libpng-1.6.40" }, { "spdxElementId": "SPDXRef-rpm-java-latest-openjdk-26.0.2.1.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13" } ] }