{ "SPDXID": "SPDXRef-DOCUMENT", "name": "java-1.8.0-openjdk-headless-1.1.8.0.502.b07-0.oe2403sp3.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-09-19T17:58:04.151463195Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/java-1.8.0-openjdk-headless-1.1.8.0.502.b07-0.oe2403sp3.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.502.b07", "name": "java-1.8.0-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "c1825816fb51f066961d2b16050a24b33f93cf4acf6e2f3c783cc66e21776a62" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.502.b07-0.oe2403sp3?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/18716c075d85b60c9ee089271af00a9373efbc50@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/9d27927fd6ba94b97b1822137d2ec2ff2c60bcfa@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/08f6ee6d94c8f084af5e1743eef360400094b070@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/4db1e23bbcf088c8b55fff175595b200aa062508@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b1a8b041949dddb775a04aef5ed51f23bfa9e52e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/70f229b9052a21bbd5c1ea31ea366db78fbf2b48@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ee1bd9d651e13ef470142dbc664c54a43c1593bd@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/8fa0b9c5f73d70bde42aef84f5a7775ca8f08cbf@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/3efbfa48438c3c84c63bcacf3441b3f08e0fb6e4@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/f37ad054378f5ada5be18c9cd3bd253239ca933c@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/8d5243332e47d6838b1539a58577ca63e2369e92@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/3bf8208b674a69d73904e174cdf8fcabb6d1e0ad@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/2f39b53e106baa5bb84e2d95185117c5448ccbd8@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/c9c71606e51a30ecb4fdb09018caa5c3f8020040@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/7723a19c2c1008338cdd37b918c56e10c913574d@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b297b7029dc165c527f7b60d271bb302ec2c4d4d@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/e2622bad52b8fd5fb40c631a321fe6f5e0e109ac@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/2336177bb99a2915587078d8e877556c4938ef011f3f11fe1272b972a31ed564-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.502.b07-0.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-ca-certificates-2023.2.64", "name": "ca-certificates", "licenseConcluded": "Public Domain", "checksums": [ { "algorithm": "SHA256", "checksumValue": "c91aaf4d0946fd14690d4c63a2ad411d4d8c9818908dcd691252af687762f18f" } ], "description": "This package contains the set of CA certificates chosen by the\nMozilla Foundation for use with the Internet PKI.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/ca-certificates@2023.2.64-5.oe2403sp3?arch=noarch&epoch=0&upstream=ca-certificates-2023.2.64-5.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://fedoraproject.org/wiki/CA-Certificates", "licenseDeclared": "Public Domain", "sourceInfo": "acquired package info from repodata DB: repodata/2336177bb99a2915587078d8e877556c4938ef011f3f11fe1272b972a31ed564-primary.sqlite.bz2", "summary": "The Mozilla CA root certificate bundle", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2023.2.64-5.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-coreutils-9.4", "name": "coreutils", "licenseConcluded": "GPLv3+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "fa89758d479a3d2b96883d6195bf9539caa2707e0186bc236f0256c430ca67ad" } ], "description": "These are the GNU core utilities. This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/coreutils@9.4-23.oe2403sp3?arch=aarch64&epoch=0&upstream=coreutils-9.4-23.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gnu.org/software/coreutils/", "licenseDeclared": "GPLv3+", "sourceInfo": "acquired package info from repodata DB: repodata/2336177bb99a2915587078d8e877556c4938ef011f3f11fe1272b972a31ed564-primary.sqlite.bz2", "summary": "A set of basic GNU tools commonly used in shell scripts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:9.4-23.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-cups-libs-2.4.7", "name": "cups-libs", "licenseConcluded": "Apache-2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9c26e9b78b5ca2094e632d01ee7ed47e8937131a6880c314b51655403f1cec7d" } ], "description": "CUPS printing system provides a portable printing layer for\nUNIX® operating systems. It has been developed by Apple Inc.\nto promote a standard printing solution for all UNIX vendors and users.\nCUPS provides the System V and Berkeley command-line interfaces.\nThe cups-libs package provides libraries used by applications to use CUPS\nnatively, without needing the lp/lpr commands.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/cups-libs@2.4.7-14.oe2403sp3?arch=aarch64&epoch=1&upstream=cups-2.4.7-14.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://openprinting.github.io/cups/", "licenseDeclared": "Apache-2.0", "sourceInfo": "acquired package info from repodata DB: repodata/2336177bb99a2915587078d8e877556c4938ef011f3f11fe1272b972a31ed564-primary.sqlite.bz2", "summary": "CUPS libs", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:2.4.7-14.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-freetype-2.13.2", "name": "freetype", "licenseConcluded": "(FTL OR GPL-2.0-or-later) AND BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "c25111a669662258d267b78acd1dc32f39f96bd186a313d4a32c0ee032486149" } ], "description": "FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/freetype@2.13.2-5.oe2403sp3?arch=aarch64&epoch=0&upstream=freetype-2.13.2-5.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.freetype.org", "licenseDeclared": "(FTL OR GPL-2.0-or-later) AND BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib", "sourceInfo": "acquired package info from repodata DB: repodata/2336177bb99a2915587078d8e877556c4938ef011f3f11fe1272b972a31ed564-primary.sqlite.bz2", "summary": "FreeType is a freely available software library to render fonts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.13.2-5.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-glibc-2.38", "name": "glibc", "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "checksums": [ { "algorithm": "SHA256", "checksumValue": "ddc32e0b4d9456930df864f399edc41b74031a659bbd0668c3e84ae7f47fba94" } ], "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp3?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.gnu.org/software/glibc/", "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "sourceInfo": "acquired package info from repodata DB: repodata/2336177bb99a2915587078d8e877556c4938ef011f3f11fe1272b972a31ed564-primary.sqlite.bz2", "summary": "The GNU libc libraries", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.38-101.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-libgcc-12.3.1", "name": "libgcc", "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "173c70705e92452c23307401747b27367ea2b40e4c3925c027a2a5d6de057c33" } ], "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libgcc@12.3.1-111.oe2403sp3?arch=aarch64&epoch=0&upstream=gcc-12.3.1-111.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gcc.gnu.org", "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/2336177bb99a2915587078d8e877556c4938ef011f3f11fe1272b972a31ed564-primary.sqlite.bz2", "summary": "GCC version 12 shared support library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:12.3.1-111.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-libstdc---12.3.1", "name": "libstdc++", "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "247f25fc0072f3c5e64daab8856817386e4fa65babd70e304e1c75e434540a98" } ], "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libstdc++@12.3.1-111.oe2403sp3?arch=aarch64&epoch=0&upstream=gcc-12.3.1-111.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gcc.gnu.org", "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/2336177bb99a2915587078d8e877556c4938ef011f3f11fe1272b972a31ed564-primary.sqlite.bz2", "summary": "GNU Standard C++ Library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:12.3.1-111.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-nss-3.94.0", "name": "nss", "licenseConcluded": "MPLv2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d028a83bd5c4b8077321ef1409ccfe7789516d4078442ee61dfac6a80e2c9ce5" } ], "description": "Network Security Services (NSS) is a set of libraries designed to\nsupport cross-platform development of security-enabled client and\nserver applications. Applications built with NSS can support SSL v2\nand v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509\nv3 certificates, and other security standards.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/nss@3.94.0-10.oe2403sp3?arch=aarch64&epoch=0&upstream=nss-3.94.0-10.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.mozilla.org/projects/security/pki/nss/", "licenseDeclared": "MPLv2.0", "sourceInfo": "acquired package info from repodata DB: repodata/2336177bb99a2915587078d8e877556c4938ef011f3f11fe1272b972a31ed564-primary.sqlite.bz2", "summary": "Network Security Services", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.94.0-10.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-nss-softokn-3.94.0", "name": "nss-softokn", "licenseConcluded": "MPLv2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "dedf23f37e928a2014e9fff3f11004ea0b94ab40dcea4a579da8e55cf2e3d291" } ], "description": "Network Security Services Softoken and Freebl Cryptographic Module", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/nss-softokn@3.94.0-10.oe2403sp3?arch=aarch64&epoch=0&upstream=nss-3.94.0-10.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.mozilla.org/projects/security/pki/nss/", "licenseDeclared": "MPLv2.0", "sourceInfo": "acquired package info from repodata DB: repodata/2336177bb99a2915587078d8e877556c4938ef011f3f11fe1272b972a31ed564-primary.sqlite.bz2", "summary": "Network Security Services Softoken and Freebl library Module", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.94.0-10.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-tzdata-java-2024a", "name": "tzdata-java", "licenseConcluded": "Public Domain", "checksums": [ { "algorithm": "SHA256", "checksumValue": "979882dc74a6e96a7cd23d24630ddd8d5c6fda42791d1473d6ebb4675f7c7164" } ], "description": "This package contains timezone information for use by Java runtimes.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/tzdata-java@2024a-8.oe2403sp3?arch=noarch&epoch=0&upstream=tzdata-2024a-8.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.iana.org/time-zones", "licenseDeclared": "Public Domain", "sourceInfo": "acquired package info from repodata DB: repodata/2336177bb99a2915587078d8e877556c4938ef011f3f11fe1272b972a31ed564-primary.sqlite.bz2", "summary": "Timezone data for Java", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2024a-8.oe2403sp3" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-ca-certificates-2023.2.64" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-cups-libs-2.4.7" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-freetype-2.13.2" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-nss-3.94.0" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-nss-softokn-3.94.0" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-tzdata-java-2024a" } ] }