{ "SPDXID":"SPDXRef-DOCUMENT", "name":"rome-certiorem-0.1.18.0-1.oe2409.aarch64.rpm", "spdxVersion":"SPDX-2.2", "creationInfo":{ "created":"2024-09-30T03:30:07.5589037Z", "creators":"[openeuler_creator]" }, "dataLicense":"CC0-1.0", "documentNamespace":"https://repo.openeuler.org/security/data/sbom/rome-certiorem-0.1.18.0-1.oe2409.aarch64.rpm", "packages":[ { "SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-8bd29292-7730-43ff-8fda-db32918ab742", "name":"java-1.8.0-openjdk-headless", "checksums":[ { "algorithm":"SHA256", "checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1" } ], "description":"The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0", "referenceType":"checksum" } ], "filesAnalyzed":false, "homepage":"http://openjdk.java.net/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"OpenJDK Headless Runtime Environment 8", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:1.8.0.422.b05-11.oe2409" }, { "SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-50c56174-92b9-46d8-8cec-681c80ee2e2b", "name":"java-11-openjdk-headless", "checksums":[ { "algorithm":"SHA256", "checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0" } ], "description":"The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0", "referenceType":"checksum" } ], "filesAnalyzed":false, "homepage":"http://openjdk.java.net/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"OpenJDK Headless Runtime Environment 11", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:11.0.24.8-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-1be73c85-4720-4929-9403-894dc935c05a", "name":"javapackages-filesystem", "checksums":[ { "algorithm":"SHA256", "checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887" } ], "description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/fedora-java/javapackages", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Filesystem layout for java packages", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:5.3.0-6.oe2409" }, { "SPDXID":"SPDXRef-rpm-rome-fetcher-1.18.0-83354481-187a-4ffd-b6f4-7ce796cb5304-4de82fec-6f4c-4547-ba2c-3527c2b3719e", "name":"rome-fetcher", "checksums":[ { "algorithm":"SHA256", "checksumValue":"e1ab9fd766d6ee88b538290fda1c560613189c089f395a9aa19c771de556a940" } ], "description":"ROME Fetcher is a caching feed fetcher that supports retrieval of\nfeeds via HTTP conditional GET. Supports ETags, GZip compression,\nand RFC3229 Delta encoding.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/rome-fetcher@1.18.0-1.oe2409?arch=noarch&epoch=0&upstream=rome-1.18.0-1.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/com.rometools/rome-fetcher@1.18.0", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://rometools.github.io/rome/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Retrieves RSS feeds via HTTP conditional gets using ROME", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.18.0-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-slf4j-1.7.25-7a925666-9164-47aa-a4df-855235357e06-0db57125-50b0-4f88-9a92-8b6135994b85", "name":"slf4j", "checksums":[ { "algorithm":"SHA256", "checksumValue":"ba6f8d3a47ce9334d7fd149e27138e1c3a50add751a127aaaad2923e24da7e2d" } ], "description":"The Simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various\nlogging frameworks (e.g. java.util.logging, logback, log4j) allowing the end user to plug in the\ndesired logging framework at deployment time.Before you start using SLF4J, we highly recommend\nthat you read the two-page SLF4J user manual. Note that SLF4J-enabling your library implies the\naddition of only a single mandatory dependency, namely slf4j-api.jar. If no binding is found on\nthe class path, then SLF4J will default to a no-operation implementation. In case you wish to\nmigrate your Java source files to SLF4J, consider our migrator tool which can migrate your project\nto use the SLF4J API in just a few minutes. In case an externally-maintained component you depend\non uses a logging API other than SLF4J, such as commons logging, log4j or java.util.logging, have\na look at SLF4J's binary-support for legacy APIs.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/slf4j@1.7.25-8.oe2409?arch=noarch&epoch=0&upstream=slf4j-1.7.25-8.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.slf4j/slf4j-api@1.7.25", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.slf4j/slf4j-nop@1.7.25", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.slf4j/slf4j-simple@1.7.25", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://www.slf4j.org/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Simple Logging Facade for Java(SLF4J)", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.7.25-8.oe2409" } ], "relationships":[ { "spdxElementId":"SPDXRef-rpm-rome-certiorem-1.18.0-cabfbc71-0135-4358-8dab-702d40c7b79a", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-8bd29292-7730-43ff-8fda-db32918ab742" }, { "spdxElementId":"SPDXRef-rpm-rome-certiorem-1.18.0-cabfbc71-0135-4358-8dab-702d40c7b79a", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-50c56174-92b9-46d8-8cec-681c80ee2e2b" }, { "spdxElementId":"SPDXRef-rpm-rome-certiorem-1.18.0-cabfbc71-0135-4358-8dab-702d40c7b79a", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-1be73c85-4720-4929-9403-894dc935c05a" }, { "spdxElementId":"SPDXRef-rpm-rome-certiorem-1.18.0-cabfbc71-0135-4358-8dab-702d40c7b79a", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-rome-fetcher-1.18.0-83354481-187a-4ffd-b6f4-7ce796cb5304-4de82fec-6f4c-4547-ba2c-3527c2b3719e" }, { "spdxElementId":"SPDXRef-rpm-rome-certiorem-1.18.0-cabfbc71-0135-4358-8dab-702d40c7b79a", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-slf4j-1.7.25-7a925666-9164-47aa-a4df-855235357e06-0db57125-50b0-4f88-9a92-8b6135994b85" } ] }