{ "SPDXID": "SPDXRef-DOCUMENT", "name": "jss-0.5.4.2-2.oe2403sp4.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-07-04T02:24:06.585354077Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/jss-0.5.4.2-2.oe2403sp4.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-jss-5.4.2", "name": "jss", "licenseConcluded": "MPLv1.1 or GPLv2+ or LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "e56a1fcac067d0adc27a14a8c61a619fcfff77bc49091371e7eea5faaf786d83" } ], "description": "JSS offers a implementation for java-based applications to use native NSS.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/jss@5.4.2-2.oe2403sp4?arch=x86_64&epoch=0&upstream=jss-5.4.2-2.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.dogtagpki.org/wiki/JSS", "licenseDeclared": "MPLv1.1 or GPLv2+ or LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Java Security Services", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.4.2-2.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-apache-commons-lang3-3.18.0", "name": "apache-commons-lang3", "licenseConcluded": "Apache-2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "85d8d180626351349befa6c91263ec874edd827663d14b8c3681b2a5b6d37dd2" } ], "description": "The standard Java libraries fail to provide enough methods for\nmanipulation of its core classes. The Commons Lang Component provides\nthese extra methods.\nLang provides a host of helper utilities for the java.lang API,\nnotably String manipulation methods, basic numerical methods, object\nreflection, concurrency, creation and serialization and System\nproperties. Additionally it contains basic enhancements to\njava.util.Date and a series of utilities dedicated to help with\nbuilding methods, such as hashCode, toString and equals.\nNote that Lang 3.0 (and subsequent versions) use a different\npackage (org.apache.commons.lang3) than the previous\nversions (org.apache.commons.lang), allowing it to be used at the same\ntime as an earlier version.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/apache-commons-lang3@3.18.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-lang3-3.18.0-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-lang3@3.18.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://commons.apache.org/proper/commons-lang/", "licenseDeclared": "Apache-2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Apache Commons Lang version 3.0", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.18.0-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-glibc-2.38", "name": "glibc", "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b136cc1d6c94e7df3b522b541c89c22084f0ce440f1b9714ed930f664b10ea04" } ], "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.gnu.org/software/glibc/", "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "The GNU libc libraries", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.38-107.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-17-openjdk-headless-17.0.19.10", "name": "java-17-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "e615ae1f143b2e77eafe04b29cd221fdac6854e48a8a79636878066566cf205e" } ], "description": "The OpenJDK runtime environment 17 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-17-openjdk-headless@17.0.19.10-7.oe2403sp4?arch=x86_64&epoch=1&upstream=java-17-openjdk-17.0.19.10-7.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/72487551da767cb64283a2b047fce8b590a81287@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 17", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:17.0.19.10-7.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-javapackages-tools-5.3.0", "name": "javapackages-tools", "licenseConcluded": "BSD-3-Clause", "checksums": [ { "algorithm": "SHA256", "checksumValue": "2b6090c9504bab6a1d080f4544ef16de313c7bbe23b7c0896a906789b7edffd1" } ], "description": "The javapackages-tools package contains macros and scripts to support Java packaging.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-tools@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.sun/tools@SYSTEM", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/sun.jdk/jconsole@SYSTEM", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "licenseDeclared": "BSD-3-Clause", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Support for Java packaging with macros and scripts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libgcc-12.3.1", "name": "libgcc", "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "092db224576930eedd234726562459f564bb59dda6c5eca2b004d8abdecc8a2c" } ], "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libgcc@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gcc.gnu.org", "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "GCC version 12 shared support library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:12.3.1-110.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-libstdc---12.3.1", "name": "libstdc++", "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "082bf133e19c4d9e84db23bfc3eee5375a3069ac3ff0a2053138c91066ddab5b" } ], "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libstdc++@12.3.1-110.oe2403sp4?arch=x86_64&epoch=0&upstream=gcc-12.3.1-110.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gcc.gnu.org", "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "GNU Standard C++ Library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:12.3.1-110.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-nspr-4.35.0", "name": "nspr", "licenseConcluded": "MPLv2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "12ba9a5754c102875cf3ddfecb76228962d21587f16157c0ea19611aeac6df31" } ], "description": "NetScape Portable Runtime (NSPR) provides platform independence for non-GUI\noperating system facilities. These facilities include threads, thread\nsynchronization, normal file and network I/O, interval timing and calendar\ntime, basic memory management (malloc and free) and shared library linking.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/nspr@4.35.0-5.oe2403sp4?arch=x86_64&epoch=0&upstream=nspr-4.35.0-5.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.mozilla.org/projects/nspr", "licenseDeclared": "MPLv2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Netscape Portable Runtime", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:4.35.0-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-nss-3.94.0", "name": "nss", "licenseConcluded": "MPLv2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d97ba81a22cd03ecc9a0f050881715c0c4f5b8d5e41bb1d9150110969f895b6c" } ], "description": "Network Security Services (NSS) is a set of libraries designed to\nsupport cross-platform development of security-enabled client and\nserver applications. Applications built with NSS can support SSL v2\nand v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509\nv3 certificates, and other security standards.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/nss@3.94.0-9.oe2403sp4?arch=x86_64&epoch=0&upstream=nss-3.94.0-9.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.mozilla.org/projects/security/pki/nss/", "licenseDeclared": "MPLv2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Network Security Services", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.94.0-9.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-nss-util-3.94.0", "name": "nss-util", "licenseConcluded": "MPLv2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "67b0a0e2ba5ca356e2231dc2b92a18dafe7f2ff1bf6fe7ff12e192f2f2483630" } ], "description": "Utilities for Network Security Services and the Softoken module\nmanipulate the NSS certificate and key database.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/nss-util@3.94.0-9.oe2403sp4?arch=x86_64&epoch=0&upstream=nss-3.94.0-9.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.mozilla.org/projects/security/pki/nss/", "licenseDeclared": "MPLv2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Network Security Services Utilities Library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.94.0-9.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-slf4j-1.7.25", "name": "slf4j", "licenseConcluded": "MIT and ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "456cf9d3fb00b1b864db4c93b50cc9e2ac8661c8f876e065e94aa422886f4e98" } ], "description": "The Simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various\nlogging frameworks (e.g. java.util.logging, logback, log4j) allowing the end user to plug in the\ndesired logging framework at deployment time.Before you start using SLF4J, we highly recommend\nthat you read the two-page SLF4J user manual. Note that SLF4J-enabling your library implies the\naddition of only a single mandatory dependency, namely slf4j-api.jar. If no binding is found on\nthe class path, then SLF4J will default to a no-operation implementation. In case you wish to\nmigrate your Java source files to SLF4J, consider our migrator tool which can migrate your project\nto use the SLF4J API in just a few minutes. In case an externally-maintained component you depend\non uses a logging API other than SLF4J, such as commons logging, log4j or java.util.logging, have\na look at SLF4J's binary-support for legacy APIs.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/slf4j@1.7.25-8.oe2403sp4?arch=noarch&epoch=0&upstream=slf4j-1.7.25-8.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.slf4j/slf4j-api@1.7.25", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.slf4j/slf4j-nop@1.7.25", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.slf4j/slf4j-simple@1.7.25", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.slf4j.org/", "licenseDeclared": "MIT and ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Simple Logging Facade for Java(SLF4J)", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.7.25-8.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-slf4j-jdk14-1.7.25", "name": "slf4j-jdk14", "licenseConcluded": "MIT and ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "4555b4723b5f44a8809ef47650c1b55cd0b54a5c8d18b8b33d71014698372d42" } ], "description": "JDK14 Binding of SLF4J.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/slf4j-jdk14@1.7.25-8.oe2403sp4?arch=noarch&epoch=0&upstream=slf4j-1.7.25-8.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.slf4j/slf4j-jdk14@1.7.25", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.slf4j.org/", "licenseDeclared": "MIT and ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "JDK14 Binding of SLF4J", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.7.25-8.oe2403sp4" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-jss-5.4.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-apache-commons-lang3-3.18.0" }, { "spdxElementId": "SPDXRef-rpm-jss-5.4.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38" }, { "spdxElementId": "SPDXRef-rpm-jss-5.4.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-17-openjdk-headless-17.0.19.10" }, { "spdxElementId": "SPDXRef-rpm-jss-5.4.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-tools-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-jss-5.4.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1" }, { "spdxElementId": "SPDXRef-rpm-jss-5.4.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1" }, { "spdxElementId": "SPDXRef-rpm-jss-5.4.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-nspr-4.35.0" }, { "spdxElementId": "SPDXRef-rpm-jss-5.4.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-nss-3.94.0" }, { "spdxElementId": "SPDXRef-rpm-jss-5.4.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-nss-util-3.94.0" }, { "spdxElementId": "SPDXRef-rpm-jss-5.4.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-slf4j-1.7.25" }, { "spdxElementId": "SPDXRef-rpm-jss-5.4.2", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-slf4j-jdk14-1.7.25" } ] }