{ "SPDXID":"SPDXRef-DOCUMENT", "name":"xalan-j2-0.2.7.2-1.oe2409.aarch64.rpm", "spdxVersion":"SPDX-2.2", "creationInfo":{ "created":"2024-09-30T03:30:07.5589037Z", "creators":"[openeuler_creator]" }, "dataLicense":"CC0-1.0", "documentNamespace":"https://repo.openeuler.org/security/data/sbom/xalan-j2-0.2.7.2-1.oe2409.aarch64.rpm", "packages":[ { "SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-dc008692-455d-4075-848d-e3c346e409f5", "name":"bash", "checksums":[ { "algorithm":"SHA256", "checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39" } ], "description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://www.gnu.org/software/bash", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"It is the Bourne Again Shell", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:5.2.21-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-ea38bcf8-995d-4bc0-b3ec-8eea73d0c77e", "name":"coreutils", "checksums":[ { "algorithm":"SHA256", "checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702" } ], "description":"These are the GNU core utilities. This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://www.gnu.org/software/coreutils/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A set of basic GNU tools commonly used in shell scripts", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:9.5-4.oe2409" }, { "SPDXID":"SPDXRef-rpm-glassfish-servlet-api-3.1.0-2429f765-aee3-4bf3-9867-a8c5b8fe8704-eb950456-237b-4632-b076-34a63975c9c9", "name":"glassfish-servlet-api", "checksums":[ { "algorithm":"SHA256", "checksumValue":"dfe4cc9872df77efd22375c5041564d2f3b90a48fa17b5320bb5e3644ad4100c" } ], "description":"Java Servlets is a JCP Standard technology for interacting with the web on the Java EE platform.\nIt is the foundation web specification in the Java Enterprise Platform. Developers can build web\napplications using the Servlet API to interact with the request/response workflow.\nThis package provides some classes and interfaces which define and describe the contracts between\na servlet class and the runtime environment provided for an instance of such a class.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/glassfish-servlet-api@3.1.0-17.oe2409?arch=noarch&epoch=0&upstream=glassfish-servlet-api-3.1.0-17.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/javax.servlet/javax.servlet-api@3.1.0", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/javax.servlet/servlet-api@3.1.0", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.geronimo.specs/geronimo-servlet_3.0_spec@3.1.0", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.eclipse.jetty.orbit/javax.servlet@3.1.0", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://servlet-spec.java.net", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"API of Java Servlet", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:3.1.0-17.oe2409" }, { "SPDXID":"SPDXRef-rpm-jakarta-servlet-5.0.0-992bf37d-cb89-438d-89f7-ffa3854822c5-25b6904f-94f8-446f-83c6-6561ba96ae47", "name":"jakarta-servlet", "checksums":[ { "algorithm":"SHA256", "checksumValue":"b17b85b6a8bf59058bcd7e3b3066bfedafecd3ffd0ff239edcdb4a5329f6b288" } ], "description":"Jakarta Servlet defines a server-side API for handling HTTP requests\nand responses.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/jakarta-servlet@5.0.0-4.oe2409?arch=noarch&epoch=0&upstream=jakarta-servlet-5.0.0-4.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/javax.servlet/servlet-api@5.0.0", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/javax.servlet/javax.servlet-api@5.0.0", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/eclipse-ee4j/servlet-api", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Server-side API for handling HTTP requests and responses", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:5.0.0-4.oe2409" }, { "SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-a81c0e9f-0866-4806-a843-29241a63689c", "name":"java-1.8.0-openjdk-headless", "checksums":[ { "algorithm":"SHA256", "checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1" } ], "description":"The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0", "referenceType":"checksum" } ], "filesAnalyzed":false, "homepage":"http://openjdk.java.net/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"OpenJDK Headless Runtime Environment 8", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:1.8.0.422.b05-11.oe2409" }, { "SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-d9e0f74b-6e54-4257-921e-2c322eb023a8", "name":"java-11-openjdk-headless", "checksums":[ { "algorithm":"SHA256", "checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0" } ], "description":"The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0", "referenceType":"checksum" } ], "filesAnalyzed":false, "homepage":"http://openjdk.java.net/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"OpenJDK Headless Runtime Environment 11", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:11.0.24.8-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-fa593f12-8de1-4e2a-944c-c94d828e5977", "name":"javapackages-filesystem", "checksums":[ { "algorithm":"SHA256", "checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887" } ], "description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/fedora-java/javapackages", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Filesystem layout for java packages", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:5.3.0-6.oe2409" }, { "SPDXID":"SPDXRef-rpm-xerces-j2-2.12.2-d34c2b92-46ae-4c30-8b0c-508a475b5f49-a1b3d293-de68-4479-8d69-0f8b8e22eca3", "name":"xerces-j2", "checksums":[ { "algorithm":"SHA256", "checksumValue":"d5d0e7c7235776d916b9b8abb985aba955ecd18315251c1a712f24466fd67214" } ], "description":"Welcome to the future! Xerces2 is the next generation of high\nperformance, fully compliant XML parsers in the Apache Xerces family.\nThis new version of Xerces introduces the Xerces Native Interface (XNI),\na complete framework for building parser components and configurations\nthat is extremely modular and easy to program.\n\nThe Apache Xerces2 parser is the reference implementation of XNI but\nother parser components, configurations, and parsers can be written\nusing the Xerces Native Interface. For complete design and\nimplementation documents, refer to the XNI Manual.\n\nXerces 2 is a fully conforming XML Schema processor. For more\ninformation, refer to the XML Schema page.\n\nXerces 2 also provides a partial implementation of Document Object Model\nLevel 3 Core, Load and Save and Abstract Schemas [deprecated] Working\nDrafts. For more information, refer to the DOM Level 3 Implementation\npage.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/xerces-j2@2.12.2-1.oe2409?arch=noarch&epoch=0&upstream=xerces-j2-2.12.2-1.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/apache/xerces-j2@2.11.0", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/xerces/xerces@2.11.0", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/xerces/xercesImpl@2.11.0", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/xerces/xmlParserAPIs@2.11.0", "referenceType":"purl" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/69e63f6408cd61452b97748739555188e16d0d39@1.0.0", "referenceType":"checksum" } ], "filesAnalyzed":false, "homepage":"http://xerces.apache.org/xerces2-j/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Java XML parser", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.12.2-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-xml-commons-apis-1.4.01-7103bf6a-d745-4981-93b8-42d02ed2679f-c6e3b511-130f-4440-be23-3c248951535f", "name":"xml-commons-apis", "checksums":[ { "algorithm":"SHA256", "checksumValue":"a7b69a492e6a8f57943cf16deb20bf467bb0be854b83bdf00b4ca20d5d1701ad" } ], "description":"xml-commons-apis is designed to organize and have common packaging for the various externally-defined \\\nstandards code relating to XML - things like the DOM, SAX, and JAXP interfaces.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/xml-commons-apis@1.4.01-29.oe2409?arch=noarch&epoch=0&upstream=xml-commons-apis-1.4.01-29.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/xerces/dom3-xml-apis@1.3.04", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/xml-apis/xml-apis@2.0.2", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/xml-apis/xml-apis-ext@1.3.04", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://xml.apache.org/commons/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"APIs for XML related code", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.4.01-29.oe2409" } ], "relationships":[ { "spdxElementId":"SPDXRef-rpm-xalan-j2-2.7.2-7f6ab75f-78a2-4c23-bfc5-746f6d095a72", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-dc008692-455d-4075-848d-e3c346e409f5" }, { "spdxElementId":"SPDXRef-rpm-xalan-j2-2.7.2-7f6ab75f-78a2-4c23-bfc5-746f6d095a72", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-ea38bcf8-995d-4bc0-b3ec-8eea73d0c77e" }, { "spdxElementId":"SPDXRef-rpm-xalan-j2-2.7.2-7f6ab75f-78a2-4c23-bfc5-746f6d095a72", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-glassfish-servlet-api-3.1.0-2429f765-aee3-4bf3-9867-a8c5b8fe8704-eb950456-237b-4632-b076-34a63975c9c9" }, { "spdxElementId":"SPDXRef-rpm-xalan-j2-2.7.2-7f6ab75f-78a2-4c23-bfc5-746f6d095a72", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-jakarta-servlet-5.0.0-992bf37d-cb89-438d-89f7-ffa3854822c5-25b6904f-94f8-446f-83c6-6561ba96ae47" }, { "spdxElementId":"SPDXRef-rpm-xalan-j2-2.7.2-7f6ab75f-78a2-4c23-bfc5-746f6d095a72", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-a81c0e9f-0866-4806-a843-29241a63689c" }, { "spdxElementId":"SPDXRef-rpm-xalan-j2-2.7.2-7f6ab75f-78a2-4c23-bfc5-746f6d095a72", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-d9e0f74b-6e54-4257-921e-2c322eb023a8" }, { "spdxElementId":"SPDXRef-rpm-xalan-j2-2.7.2-7f6ab75f-78a2-4c23-bfc5-746f6d095a72", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-fa593f12-8de1-4e2a-944c-c94d828e5977" }, { "spdxElementId":"SPDXRef-rpm-xalan-j2-2.7.2-7f6ab75f-78a2-4c23-bfc5-746f6d095a72", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-xerces-j2-2.12.2-d34c2b92-46ae-4c30-8b0c-508a475b5f49-a1b3d293-de68-4479-8d69-0f8b8e22eca3" }, { "spdxElementId":"SPDXRef-rpm-xalan-j2-2.7.2-7f6ab75f-78a2-4c23-bfc5-746f6d095a72", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-xml-commons-apis-1.4.01-7103bf6a-d745-4981-93b8-42d02ed2679f-c6e3b511-130f-4440-be23-3c248951535f" } ] }