{ "SPDXID":"SPDXRef-DOCUMENT", "name":"apache-commons-ognl-0.3.0.2-1.oe2409.aarch64.rpm", "spdxVersion":"SPDX-2.2", "creationInfo":{ "created":"2024-09-30T03:30:07.5589037Z", "creators":"[openeuler_creator]" }, "dataLicense":"CC0-1.0", "documentNamespace":"https://repo.openeuler.org/security/data/sbom/apache-commons-ognl-0.3.0.2-1.oe2409.aarch64.rpm", "packages":[ { "SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-07c039bb-28f1-4fa5-99f1-41c153523452", "name":"java-1.8.0-openjdk-headless", "checksums":[ { "algorithm":"SHA256", "checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1" } ], "description":"The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0", "referenceType":"checksum" } ], "filesAnalyzed":false, "homepage":"http://openjdk.java.net/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"OpenJDK Headless Runtime Environment 8", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:1.8.0.422.b05-11.oe2409" }, { "SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-0b04fa23-b1fa-4026-be56-c9679f0cac4d", "name":"java-11-openjdk-headless", "checksums":[ { "algorithm":"SHA256", "checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0" } ], "description":"The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0", "referenceType":"checksum" } ], "filesAnalyzed":false, "homepage":"http://openjdk.java.net/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"OpenJDK Headless Runtime Environment 11", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:11.0.24.8-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-a1aa4fbd-8d37-49d1-9053-9b82636c69bf", "name":"javapackages-filesystem", "checksums":[ { "algorithm":"SHA256", "checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887" } ], "description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/fedora-java/javapackages", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Filesystem layout for java packages", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:5.3.0-6.oe2409" }, { "SPDXID":"SPDXRef-rpm-javassist-3.18.1-649e4e43-b55a-4f17-a86d-ad85784d446e-378dc2d0-a4d4-4722-8431-b878f8690b2d", "name":"javassist", "checksums":[ { "algorithm":"SHA256", "checksumValue":"e5564521ad86c4ca26969eecfefb49797d6b7ed2460edb2c6d10fc0cc969c110" } ], "description":"Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a\nclass library for editing bytecodes in Java; it enables Java programs to define a new class\nat runtime and to modify a class file when the JVM loads it. Unlike other similar bytecode\neditors, Javassist provides two levels of API: source level and bytecode level. If the users\nuse the source- level API, they can edit a class file without knowledge of the specifications\nof the Java bytecode. The whole API is designed with only the vocabulary of the Java language.\nYou can even specify inserted bytecode in the form of source text; Javassist compiles it on\nthe fly. On the other hand, the bytecode-level API allows the users to directly edit a class\nfile as other editors.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/javassist@3.18.1-10.oe2409?arch=noarch&epoch=0&upstream=javassist-3.18.1-10.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/javassist/javassist@3.18.1.GA", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.javassist/javassist@3.18.1.GA", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://www.csg.is.titech.ac.jp/~chiba/javassist/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Java bytecode engineering toolkit", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:3.18.1-10.oe2409" } ], "relationships":[ { "spdxElementId":"SPDXRef-rpm-apache-commons-ognl-3.0.2-17f6a0cc-bcfd-4935-9b1a-00a86f4c70ca", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-07c039bb-28f1-4fa5-99f1-41c153523452" }, { "spdxElementId":"SPDXRef-rpm-apache-commons-ognl-3.0.2-17f6a0cc-bcfd-4935-9b1a-00a86f4c70ca", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-0b04fa23-b1fa-4026-be56-c9679f0cac4d" }, { "spdxElementId":"SPDXRef-rpm-apache-commons-ognl-3.0.2-17f6a0cc-bcfd-4935-9b1a-00a86f4c70ca", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-a1aa4fbd-8d37-49d1-9053-9b82636c69bf" }, { "spdxElementId":"SPDXRef-rpm-apache-commons-ognl-3.0.2-17f6a0cc-bcfd-4935-9b1a-00a86f4c70ca", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-javassist-3.18.1-649e4e43-b55a-4f17-a86d-ad85784d446e-378dc2d0-a4d4-4722-8431-b878f8690b2d" } ] }