{ "SPDXID": "SPDXRef-DOCUMENT", "name": "java-1.8.0-openjdk-demo-1.1.8.0.432.b06-0.oe2403.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-07-04T18:03:45.056502216Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/java-1.8.0-openjdk-demo-1.1.8.0.432.b06-0.oe2403.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.432.b06", "name": "java-1.8.0-openjdk-demo", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "7f530718480704eea0aff913af2d8044055d7e85097d2419bdf7818c1df9e371" } ], "description": "The OpenJDK demos 8.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-demo@1.8.0.432.b06-0.oe2403?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.432.b06-0.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/2f6bedb13e410d0caab194d93f3e171837228be8@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/7de5e9a1648e447e697df54abdc5502047505d98@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/02132b21ae7928b52868bce2102137e2f850e435@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/897171ec4b3f855d89a625bdb29c13646bfb1d9d@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/339adec6acdf74992a706be8bb015d314c87e8ea@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/6e9d2b7fb5f0a32cba4822b42ace5974d2b1348b@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/13c1db9f130cf598d1a0e1dfd3ec28d930209c90@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/3408935b21b30c9f343995f3c47f5ae7daa19aba@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/429be72bfe3bb61022a814372ed1c9bc47077bfe@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/29b53d2d631603871ec724ea735e5908dfc8df1f@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b9b4741674ea32e0b0b4c44859dfd64c88418c52@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/49cee73c23ed2f8336eeb52f912829cb798e0d0f@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/d084a695f6c9c94d806a30156df7352c85aaeb8c@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/9e22c4b15fdb13eda1de7edf70d655d154b98e10@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/c5590b61a141663d220ea3be281211452c38d69d@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/d0ef75768eaa6fc2a878b2f622d59f983b82c768@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/3a3e6a7f0bd366e68c9fa1cd00ac848d379dbd2e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/81971d91204b30b06933ba840f3cbdd1303b636a@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/e92c6779bc36d220dc341e94ec8098751c6b9524@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b1b346264d8b31c7da5fb74471410a7a18b4f24e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/e56a17abe29d8aa8786f5eeefdf3b53441799c34@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "OpenJDK Demos 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.432.b06-0.oe2403" }, { "SPDXID": "SPDXRef-rpm-coreutils-9.4", "name": "coreutils", "licenseConcluded": "GPLv3+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "5adc2b57027700f62925bd520aab7a7347bb53535232a42c5b2bd34f637e77cf" } ], "description": "These are the GNU core utilities. This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403?arch=x86_64&epoch=0&upstream=coreutils-9.4-17.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gnu.org/software/coreutils/", "licenseDeclared": "GPLv3+", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "A set of basic GNU tools commonly used in shell scripts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:9.4-17.oe2403" }, { "SPDXID": "SPDXRef-rpm-glibc-2.38", "name": "glibc", "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9c9d46dff23e85b1a909276e9dfa93ea5c35b9fa788ba716e1634854f582059e" } ], "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.gnu.org/software/glibc/", "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "The GNU libc libraries", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.38-101.oe2403" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.422.b05", "name": "java-1.8.0-openjdk", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "689ea372234449c389755d9377ee020b7bf114744f63a32c05baf3f917a49a30" } ], "description": "The OpenJDK runtime environment 8.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk@1.8.0.422.b05-1.oe2403?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-1.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "OpenJDK Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.422.b05-1.oe2403" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.432.b06", "name": "java-1.8.0-openjdk", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "262b7a03bb7c48be84d51bdd250491c5f7b8ae851660a8f6307ef34a30065e92" } ], "description": "The OpenJDK runtime environment 8.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk@1.8.0.432.b06-0.oe2403?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.432.b06-0.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "OpenJDK Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.432.b06-0.oe2403" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.452.b09", "name": "java-1.8.0-openjdk", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "3f75e1593e52c74497a1377d0d15ec37ba292f2d9f09320e0d43e0bf139b821d" } ], "description": "The OpenJDK runtime environment 8.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk@1.8.0.452.b09-2.oe2403?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.452.b09-2.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "OpenJDK Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.452.b09-2.oe2403" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.462.b08", "name": "java-1.8.0-openjdk", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "3905fee418e771df9d261e2e35058a7cf4b0a299953ff0c2f321834f1d6fba46" } ], "description": "The OpenJDK runtime environment 8.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk@1.8.0.462.b08-3.oe2403?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.462.b08-3.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "OpenJDK Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.462.b08-3.oe2403" }, { "SPDXID": "SPDXRef-rpm-libgcc-12.3.1", "name": "libgcc", "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b1e41a2f5bb5c838ad36d4f01dc55f8760b526a8c7e42929568fdf364a897610" } ], "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libgcc@12.3.1-36.oe2403?arch=x86_64&epoch=0&upstream=gcc-12.3.1-36.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gcc.gnu.org", "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "GCC version 12 shared support library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:12.3.1-36.oe2403" }, { "SPDXID": "SPDXRef-rpm-libstdc---12.3.1", "name": "libstdc++", "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "dca90635da238eb1f508069fe3042c34584bab4d7518fa1637045045b918efee" } ], "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libstdc++@12.3.1-36.oe2403?arch=x86_64&epoch=0&upstream=gcc-12.3.1-36.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gcc.gnu.org", "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "GNU Standard C++ Library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:12.3.1-36.oe2403" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.432.b06", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.432.b06", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.432.b06", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.422.b05" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.432.b06", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.432.b06" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.432.b06", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.452.b09" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.432.b06", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.462.b08" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.432.b06", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-demo-1.8.0.432.b06", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1" } ] }