{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "undertow-1.1.4.0-10.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-14T13:11:03.911431983Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/undertow-1.1.4.0-10.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.472.b08",
      "name": "java-1.8.0-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8b7519f0014fc5f3b02042e0b6846f2d0df2941ba37e257b4cdfe23263402cf9"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.472.b08-5.oe2403sp3?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.472.b08-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/0943cb6d8ca7710638af2690e12e6964e5dc9d45@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/183b80df170a3c395f3c6556549593da1f07761e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ce772f488c4b96b8fba9b14afcdf0df3b699dd8d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/aebaf5cc0cdc2d75ab2049c0cd28f426180742ed@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/fe55f53fb59790b8daf655522afd154fd77e05ed@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/31dec12f2bf26c06b8f320834ad84b0b3cacd938@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2723c23b2fb08eb5b12143ba432760fea686beff@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b95e5cd3c2cd43dc15c962c2b33c3884bd0c6140@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/503f9d657bfc840a943da2837f1453b8e19f23a4@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/a68e47f2e282e275e62bde195618b1db6cdb97e2@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6879ab65fa776899e127da9508981ee9d0f8fc0e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/c14cf4aa4edf857beb47b2e2236dde175c8965ef@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/73bd20645b25e7d091e6f1281b4457f0dc571a10@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/50e4b8940333b68ac946a839dd40cc071b014fbf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/885340121dfd39a4d716833b6ade3d90592c6ef5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/01584134933d19df5200693003aa1fa06cbbfc5f@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.472.b08-5.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-11.0.29.7",
      "name": "java-11-openjdk",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1d63a1033b4e97210fe485d452e8cf5ba8342f673a353bd59695ee5db88291bf"
        }
      ],
      "description": "The OpenJDK runtime environment.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk@11.0.29.7-1.oe2403sp3?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.29.7-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "OpenJDK Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.29.7-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.29.7",
      "name": "java-11-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8cdbb09aded00e689bdb1b8222c2efd73c980fb836bed9081703cc6a653fbac8"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.29.7-1.oe2403sp3?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.29.7-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4491f80f13c253ac5ce6003c76defdab9c0725c4@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.29.7-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "72de0d9b024158ef01350b96c203fa3844d13c8d6f6e7f5b377ef5bdf7b2a589"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp3?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-tools-5.3.0",
      "name": "javapackages-tools",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "52c8af13403e273c1125ae86b4d6dd32a579d539ea02b59f0b1044532097efb3"
        }
      ],
      "description": "The javapackages-tools package contains macros and scripts to support Java packaging.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-tools@5.3.0-6.oe2403sp3?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.sun/tools@SYSTEM",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/sun.jdk/jconsole@SYSTEM",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Support for Java packaging with macros and scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-jboss-annotations-1.2-api-1.0.2",
      "name": "jboss-annotations-1.2-api",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d316aa4e78f6af0926c5cd23aaced82b257477eb548915d87910046a250a3f0b"
        }
      ],
      "description": "This package contains Common Annotations 1.2 API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jboss-annotations-1.2-api@1.0.2-1.oe2403sp3?arch=noarch&epoch=0&upstream=jboss-annotations-1.2-api-1.0.2-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.2_spec@1.0.2.Final",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/jboss/jboss-annotations-api_spec",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Common Annotations 1.2 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.2-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-jboss-classfilewriter-1.3.0",
      "name": "jboss-classfilewriter",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0cf490e08e6c14523779f003572e9d45536fbc3f33d60e9fb23182fe8ad1e967"
        }
      ],
      "description": "This package contains JBoss Class File Writer",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jboss-classfilewriter@1.3.0-1.oe2403sp3?arch=noarch&epoch=0&upstream=jboss-classfilewriter-1.3.0-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.classfilewriter/jboss-classfilewriter@1.3.0.Final",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/jbossas/jboss-classfilewriter",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "JBoss Class File Writer",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.3.0-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-jboss-logging-3.3.0",
      "name": "jboss-logging",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4e8af339b8698f605b54edcc76fd90819de2dc8892b4e16c782db299ae388758"
        }
      ],
      "description": "This package contains the JBoss Logging Framework.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jboss-logging@3.3.0-7.oe2403sp3?arch=noarch&epoch=0&upstream=jboss-logging-3.3.0-7.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.logging/jboss-logging@3.3.0.Final",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/jboss-logging/jboss-logging",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "The JBoss Logging Framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.3.0-7.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-jboss-servlet-3.1-api-1.0.2",
      "name": "jboss-servlet-3.1-api",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f5bcc865a17eafd0d1fe04035948ca2cf2e9c05aae17d4e7ef688675c4d39073"
        }
      ],
      "description": "The Java Servlet 3.1 API classes.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jboss-servlet-3.1-api@1.0.2-2.oe2403sp3?arch=noarch&epoch=0&upstream=jboss-servlet-3.1-api-1.0.2-2.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.spec.javax.servlet/jboss-servlet-api_3.1_spec@1.0.2.Final",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.jboss.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Java Servlet 3.1 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.2-2.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-jboss-websocket-1.1-api-1.1.4",
      "name": "jboss-websocket-1.1-api",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2fc37a874576b6da4b859410b7981e4747df3a22ef8e594b0f769c7ff7d6eaf4"
        }
      ],
      "description": "The JSR-356: Java WebSocket 1.1 API classes.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jboss-websocket-1.1-api@1.1.4-2.oe2403sp3?arch=noarch&epoch=0&upstream=jboss-websocket-1.1-api-1.1.4-2.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.spec.javax.websocket/jboss-websocket-api_1.1_spec@1.1.4.Final",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/jboss/jboss-websocket-api_spec",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "JSR-356: Java WebSocket 1.1 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.4-2.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-xnio-3.4.0",
      "name": "xnio",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ea063ddbe95db886a04a9b9fa3cbc9c5f1eb9d8f4bd0c8d49168d5dd94a18eab"
        }
      ],
      "description": "XNIO is a simplified low-level I/O layer which can be used anywhere you are using NIO today.\nIt frees you from the hassle of dealing with Selectors and the lack of NIO support for\nmulticast sockets and non-socket I/O, while still maintaining all the capabilities present in NIO,\nand it opens the door to non-obvious optimizations.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xnio@3.4.0-11.oe2403sp3?arch=noarch&epoch=0&upstream=xnio-3.4.0-11.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.xnio/xnio-api@3.4.0.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.xnio/xnio-nio@3.4.0.Final",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.jboss.org/xnio",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "A simplified low-level I/O layer",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.4.0-11.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-undertow-1.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.472.b08"
    },
    {
      "spdxElementId": "SPDXRef-rpm-undertow-1.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-11.0.29.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-undertow-1.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.29.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-undertow-1.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-undertow-1.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-tools-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-undertow-1.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jboss-annotations-1.2-api-1.0.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-undertow-1.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jboss-classfilewriter-1.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-undertow-1.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jboss-logging-3.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-undertow-1.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jboss-servlet-3.1-api-1.0.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-undertow-1.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jboss-websocket-1.1-api-1.1.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-undertow-1.4.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xnio-3.4.0"
    }
  ]
}
