{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"java-11-openjdk-headless-1.11.0.24.8-3.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/java-11-openjdk-headless-1.11.0.24.8-3.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-alsa-lib-1.2.10-b3206e76-3f2f-4a99-91b8-1a369557bb97-a3bd1efb-83bb-406e-bafc-6465b6e48094",
			"name":"alsa-lib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"555df45a57a503f23fcab285f39f2bcdbf6219de021ba17b0751f7fbf4734c5d"
				}
			],
			"description":"The alsa-lib is a library to interface with ALSA in the Linux kernel\nand virtual devices using a plugin system.\nMore detail: https://alsa.opensrc.org/Alsa-lib",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/alsa-lib@1.2.10-2.oe2409?arch=aarch64&epoch=0&upstream=alsa-lib-1.2.10-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://alsa-project.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"the user space library that developers compile ALSA applications against",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.10-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-2c91e6ee-6ed5-4c88-8cd6-0fb7faac4235",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-ca-certificates-2023.2.64-5365fe7e-e8df-4250-902d-d61a44bb3b09-2df68231-93eb-4df6-bec4-ebd6664aac6b",
			"name":"ca-certificates",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"594765113414c9444a189b7f32f4d1656e37588aa9c9d4a1b6c5454119755f90"
				}
			],
			"description":"This package contains the set of CA certificates chosen by the\nMozilla Foundation for use with the Internet PKI.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/ca-certificates@2023.2.64-2.oe2409?arch=noarch&epoch=0&upstream=ca-certificates-2023.2.64-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://fedoraproject.org/wiki/CA-Certificates",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The Mozilla CA root certificate bundle",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2023.2.64-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-copy-jdk-configs-4.1-54f75799-446b-4435-86fd-5619864b7b89-4aeee90c-2363-4a34-99c4-933724be40b4",
			"name":"copy-jdk-configs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fc5cd6adc2232609ec732832416561b3c7a05af047f7c1f0c83bc0d26a42d977"
				}
			],
			"description":"Utility script for transferring JDK configuration files when updating or\narchiving. Repair rpmnew file created by error by using scrip",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/copy-jdk-configs@4.1-1.oe2409?arch=noarch&epoch=0&upstream=copy-jdk-configs-4.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/rh-openjdk/copy_jdk_configs",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"JDKs Configuration File",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-ee9ea109-470e-4009-a187-87b0079d3832",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-cups-libs-2.4.7-e4cc9fbd-df5f-4cb3-8392-da6076e03c1f-2c76b915-c10d-4f8b-b55e-cb00f4302c7d",
			"name":"cups-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d2324dfc409504924a714fad5669676cda31cca61c54ccf987e1eec89b18648e"
				}
			],
			"description":"CUPS printing system provides a portable printing layer for\nUNIX® operating systems. It has been developed by Apple Inc.\nto promote a standard printing solution for all UNIX vendors and users.\nCUPS provides the System V and Berkeley command-line interfaces.\nThe cups-libs package provides libraries used by applications to use CUPS\nnatively, without needing the lp/lpr commands.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/cups-libs@2.4.7-4.oe2409?arch=aarch64&epoch=1&upstream=cups-2.4.7-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://openprinting.github.io/cups/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"CUPS libs",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:2.4.7-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-freetype-2.13.2-dd9fbda4-326e-4922-be3c-91de4f9292da-2434d8f7-7f61-42a7-b1e3-41d6e8db9536",
			"name":"freetype",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f3763d012b0d53f47b95480781741537578894af975e51c0032a57bdc659997b"
				}
			],
			"description":"FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/freetype@2.13.2-2.oe2409?arch=aarch64&epoch=0&upstream=freetype-2.13.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.freetype.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"FreeType is a freely available software library to render fonts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.13.2-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-c82bc41f-8c43-408c-b439-2e8f4b52767b",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f-792cbbf4-9085-4c8f-a5d7-8d45065e9f37",
			"name":"harfbuzz",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"080faf1ef8626a5bef7425557815e74405c15a469edbb6c65e4b7f18973aa36b"
				}
			],
			"description":"HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string\ncontaining a sequence of Unicode codepoints, HarfBuzz selects and positions\nthe corresponding glyphs from the font, applying all of the necessary layout\nrules and font features. HarfBuzz then returns the string to you in the form\nthat is correctly arranged for the language and writing system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/harfbuzz@8.4.0-1.oe2409?arch=aarch64&epoch=0&upstream=harfbuzz-8.4.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://harfbuzz.github.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A text shaping engine",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.4.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-7146ced9-449b-412d-90ef-6a3797d36f23",
			"name":"javapackages-filesystem",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887"
				}
			],
			"description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Filesystem layout for java packages",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-lcms2-2.16-4beb53ca-074e-4d68-8e6b-98f847c23f55-372e9734-ed26-42af-90c5-b58297bd767a",
			"name":"lcms2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"1ac356bd66fee3dcc02d0307e67181242402af511b3eff1d920d706dbfc8449f"
				}
			],
			"description":"LittleCMS intends to be an OPEN SOURSE small-footprint color management\nengine,with special focus on accuracy and performence.It uses the\nInternational Color Consortium standard (ICC), which is the modern\nstandard when regarding to color management. The ICC specification\nis widely used and is referred to in many International and other\nde-facto standards.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/lcms2@2.16-1.oe2409?arch=aarch64&epoch=0&upstream=lcms2-2.16-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.littlecms.com",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Color Management Engine",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.16-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-dd600269-16a4-4ddd-833a-660f4cb47e39",
			"name":"libgcc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"700457c78fbb872d696bce55dad909a5654b5f3b74614495a9778e90553d6701"
				}
			],
			"description":"This package contains GCC shared support library which is needed\ne.g. for exception handling support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgcc@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GCC version 12 shared support library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libjpeg-turbo-3.0.1-0de5e52d-7b81-4092-a015-da59e5e9cf27-02919605-d49b-4c94-a468-de7e357ecd76",
			"name":"libjpeg-turbo",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"c3285ab95b3cdd5e6a34945f3bb04211580c9c65a4a9c343216184c0b3cd91c1"
				}
			],
			"description":"libjpeg-turbo is a JPEG image codec that uses SIMD instructions (MMX, SSE2, NEON, AltiVec)\nto accelerate baseline JPEG compression and decompression on x86, x86-64, and ARM systems.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libjpeg-turbo@3.0.1-2.oe2409?arch=aarch64&epoch=0&upstream=libjpeg-turbo-3.0.1-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://sourceforge.net/projects/libjpeg-turbo",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"MMX/SSE2/SIMD accelerated libjpeg-compatible JPEG codec library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.0.1-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-2dd95f01-807c-46f8-ac4a-3ed09f1ba330",
			"name":"libstdc++",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"e5b9ad5cd37731d9a30e5e617d61dfe47bdab86310fee1fe3d09dd7d3240f407"
				}
			],
			"description":"The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libstdc++@12.3.1-37.oe2409?arch=aarch64&epoch=0&upstream=gcc-12.3.1-37.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gcc.gnu.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GNU Standard C++ Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:12.3.1-37.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-lksctp-tools-1.0.19-b2de6abb-b829-4f54-a7a8-da7d18d5abcc-33aba00a-037a-4fbb-a8e7-877d7866e22a",
			"name":"lksctp-tools",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"79176d732df2814839d17021e1882875c98743aafc5f32db6de3333bf65a2238"
				}
			],
			"description":"The lksctp-tools project provides a Linux user space library for SCTP (libsctp)\nincluding C language header files (netinet/sctp.h) for accessing SCTP specific\napplication programming interfaces not provided by the standard sockets,\nand also some helper utilities around SCTP.\n\nFor more information on the features and functions currently supported by\nlksctp, please refer to the documentation in the Linux kernel resp. in the\nlksctp-tools package. The lksctp-tools source contains a set of test programs\nwhich would also serve as example applications.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/lksctp-tools@1.0.19-3.oe2409?arch=aarch64&epoch=0&upstream=lksctp-tools-1.0.19-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://lksctp.sourceforge.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Linux Kernel Stream Control Transmission Protocol Tools",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.0.19-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-tzdata-java-2024a-dc794c86-482e-44a9-80cf-62b77c1a8b12-7d703d20-e389-4307-b547-8bbe5072d782",
			"name":"tzdata-java",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b5320686149278b3517d0ed724e323061fdd034f24b063363994b8723cc06641"
				}
			],
			"description":"This package contains timezone information for use by Java runtimes.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/tzdata-java@2024a-2.oe2409?arch=noarch&epoch=0&upstream=tzdata-2024a-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.iana.org/time-zones",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Timezone data for Java",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2024a-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-aa111d41-b4a0-49ee-8ffe-e766b42686d2",
			"name":"zlib",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"aff63d911b6bb62db3cfabac1be9f6b5df5ed30802d7ccf937ca3e840cfc09db"
				}
			],
			"description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/zlib@1.2.13-4.oe2409?arch=aarch64&epoch=0&upstream=zlib-1.2.13-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.zlib.net",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A lossless data-compression library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.13-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-alsa-lib-1.2.10-b3206e76-3f2f-4a99-91b8-1a369557bb97-a3bd1efb-83bb-406e-bafc-6465b6e48094"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-2c91e6ee-6ed5-4c88-8cd6-0fb7faac4235"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-ca-certificates-2023.2.64-5365fe7e-e8df-4250-902d-d61a44bb3b09-2df68231-93eb-4df6-bec4-ebd6664aac6b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-copy-jdk-configs-4.1-54f75799-446b-4435-86fd-5619864b7b89-4aeee90c-2363-4a34-99c4-933724be40b4"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-ee9ea109-470e-4009-a187-87b0079d3832"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-cups-libs-2.4.7-e4cc9fbd-df5f-4cb3-8392-da6076e03c1f-2c76b915-c10d-4f8b-b55e-cb00f4302c7d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-freetype-2.13.2-dd9fbda4-326e-4922-be3c-91de4f9292da-2434d8f7-7f61-42a7-b1e3-41d6e8db9536"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-c82bc41f-8c43-408c-b439-2e8f4b52767b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-harfbuzz-8.4.0-637c58ae-3cf9-4def-851e-cee745e3d78f-792cbbf4-9085-4c8f-a5d7-8d45065e9f37"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-7146ced9-449b-412d-90ef-6a3797d36f23"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-lcms2-2.16-4beb53ca-074e-4d68-8e6b-98f847c23f55-372e9734-ed26-42af-90c5-b58297bd767a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgcc-12.3.1-87bc9e2a-7bf9-4232-b78a-f8b0d632fac6-dd600269-16a4-4ddd-833a-660f4cb47e39"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libjpeg-turbo-3.0.1-0de5e52d-7b81-4092-a015-da59e5e9cf27-02919605-d49b-4c94-a468-de7e357ecd76"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libstdc---12.3.1-65b3930f-99ae-4de1-b47f-cc4ec3dab8ec-2dd95f01-807c-46f8-ac4a-3ed09f1ba330"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-lksctp-tools-1.0.19-b2de6abb-b829-4f54-a7a8-da7d18d5abcc-33aba00a-037a-4fbb-a8e7-877d7866e22a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-tzdata-java-2024a-dc794c86-482e-44a9-80cf-62b77c1a8b12-7d703d20-e389-4307-b547-8bbe5072d782"
		},
		{
			"spdxElementId":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-zlib-1.2.13-10bd60f1-a974-481e-987f-02f389ed69ab-aa111d41-b4a0-49ee-8ffe-e766b42686d2"
		}
	]
}