{ "SPDXID": "SPDXRef-DOCUMENT", "name": "java-1.8.0-openjdk-demo-1.1.8.0.502.b07-0.oe2403sp3.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-10-03T17:54:22.177491237Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/java-1.8.0-openjdk-demo-1.1.8.0.502.b07-0.oe2403sp3.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.502.b07", "name": "java-1.8.0-openjdk-demo", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "6da7c637d457f3d2fbce53207dae2c630805c9225262dd7f72325a22bffc48d0" } ], "description": "The OpenJDK demos 8.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-demo@1.8.0.502.b07-0.oe2403sp3?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/e18235a64abe8eb2a939daf686f67f1d5fa8230d@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/7143b18d6e68dc058842288af726e10661616af6@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/a787e460fcd05a30062c2e326f4ab0403642ba2d@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/132039a1f5737601da26ad13d40ae7c9202be5a1@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b23a8277c62ff41ed278ec4648c008502c7960ca@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/77fb095454efe519c9ec013e706768a257b8894f@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/e5cc68af3a6a2984b5025787d8f672279cc62af5@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/dcb1c1efd6a2509bfdbd5a3b4f5e18b500ec0b5c@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/7ca8e0479f968c8df42d19740d72fbe8db5caf27@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/0337151adbee78b9bb37bf2fbb9b4b6d35e36493@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/e9daff0dbd953cfc58c3247e8575fa4bb7ac9543@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ac049b56df6889f0233674404f17c94d38e1786c@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/2c38b0fda38fc361c4ef60152e96c88088a6c6a8@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/e2eb46cf702fb189ad025bf3fde10b01c3580f49@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/2cec8c7e9a9654b1a37ab9a0e21f28900dff4d26@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/96730b36597f45ee9a134df8e21e11f204c2cf0f@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/75b73a33ccc250b68d02b8bdcb071a47e297dc5a@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/c4d14ae6cf4cd6621358f51d131213472ec36386@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/6b00542465c9f160318aa6fbfffbfe2dd9ce017e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/04b7471c9cc5ab543510b9d7a636a127b7187e72@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/71cb0673b0c2a37f4d0f104c08329fec911864b3@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/6b442e6fbc2323ec8a4b396a14446d54a4e3d868022704ff88acfb05ddcafc99-primary.sqlite.bz2", "summary": "OpenJDK Demos 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.502.b07-0.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-coreutils-9.4", "name": "coreutils", "licenseConcluded": "GPLv3+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "3b39774c9c9188f42549b0190c61a1682bdf185131f78711be6f218a159674f0" } ], "description": "These are the GNU core utilities. This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/coreutils@9.4-23.oe2403sp3?arch=x86_64&epoch=0&upstream=coreutils-9.4-23.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gnu.org/software/coreutils/", "licenseDeclared": "GPLv3+", "sourceInfo": "acquired package info from repodata DB: repodata/6b442e6fbc2323ec8a4b396a14446d54a4e3d868022704ff88acfb05ddcafc99-primary.sqlite.bz2", "summary": "A set of basic GNU tools commonly used in shell scripts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:9.4-23.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-glibc-2.38", "name": "glibc", "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "checksums": [ { "algorithm": "SHA256", "checksumValue": "5b9ff7dcfad4f84b7de1d2f196b2ea0b7976510cb9db329bdfc1d6cfd5b8d730" } ], "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp3?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.gnu.org/software/glibc/", "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "sourceInfo": "acquired package info from repodata DB: repodata/6b442e6fbc2323ec8a4b396a14446d54a4e3d868022704ff88acfb05ddcafc99-primary.sqlite.bz2", "summary": "The GNU libc libraries", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.38-101.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.502.b07", "name": "java-1.8.0-openjdk", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "c596b37d07521638b5a1204f406092430c3dff2b9b4a226d513e6aab16d2c5a2" } ], "description": "The OpenJDK runtime environment 8.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk@1.8.0.502.b07-0.oe2403sp3?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/6b442e6fbc2323ec8a4b396a14446d54a4e3d868022704ff88acfb05ddcafc99-primary.sqlite.bz2", "summary": "OpenJDK Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.502.b07-0.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-libgcc-12.3.1", "name": "libgcc", "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b795eea15dda78b55f2609566593d846e5a777a185ca797a499afe6fadb0559e" } ], "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libgcc@12.3.1-111.oe2403sp3?arch=x86_64&epoch=0&upstream=gcc-12.3.1-111.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gcc.gnu.org", "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/6b442e6fbc2323ec8a4b396a14446d54a4e3d868022704ff88acfb05ddcafc99-primary.sqlite.bz2", "summary": "GCC version 12 shared support library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:12.3.1-111.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-libstdc---12.3.1", "name": "libstdc++", "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "161afa03dc1337bb9d0165f0460e007275b67288b17be15101ffd11b141eb303" } ], "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libstdc++@12.3.1-111.oe2403sp3?arch=x86_64&epoch=0&upstream=gcc-12.3.1-111.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gcc.gnu.org", "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/6b442e6fbc2323ec8a4b396a14446d54a4e3d868022704ff88acfb05ddcafc99-primary.sqlite.bz2", "summary": "GNU Standard C++ Library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:12.3.1-111.oe2403sp3" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.502.b07" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.502.b07", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1" } ] }