{ "SPDXID": "SPDXRef-DOCUMENT", "name": "java-1.8.0-openjdk-headless-1.1.8.0.422.b05-1.oe2403.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-07-04T18:03:45.056502216Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/java-1.8.0-openjdk-headless-1.1.8.0.422.b05-1.oe2403.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05", "name": "java-1.8.0-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9e0b136392cb4670abde343b1b58ef572256939558434570af2b7bb600f014f2" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-1.oe2403?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-1.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/6b4a666fbd6447b4b84548e9e1b12a1471b0a4a2@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/d25df3b85d93f206c4766b926209815f91a6fd72@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/d294deb979a09bf43ed4b0f76c3cfa3540e4c88c@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/55ab5515b6e2c3c8a74db95c53b41b96d71207e8@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/a77a10c3a1a7d5a07683ca2d2e903602975032db@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/833feeec18f70d1695446df651b55ebfc8a34202@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/108989549774bf5439e1e6b3aeb0165a331cca7f@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b7646b823e4684891ab10c00947ffc405e6c2fe7@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/601a87bbc3e35819e968aa68f0c5bc0816db523e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/11165c56f740adedd3ef29d1a7f63a26314678fb@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/9cd7cbe61dc470f9d8549563c527ca1b979582fa@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/0847093c4543483b0ad962ae1431f9d379be412a@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/d3ff997196af3a239463c9d2544362e087f6fc30@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/d015c2b2bd4e8e98fe5c929e431537accdd59736@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/60fc59748579b903f012a4f4e872bc35d46e25d5@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/d6bcf5f0c67d8be07c19e13e8b550bc3d51440e2@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/358f43f289d6e11c029d10f89e59ea4d94cfe95e@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.422.b05-1.oe2403" }, { "SPDXID": "SPDXRef-rpm-ca-certificates-2023.2.64", "name": "ca-certificates", "licenseConcluded": "Public Domain", "checksums": [ { "algorithm": "SHA256", "checksumValue": "c25d3c2caeaabb921b344974cfeef950b29a1c108b123fd51bd136e86c361ae4" } ], "description": "This package contains the set of CA certificates chosen by the\nMozilla Foundation for use with the Internet PKI.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/ca-certificates@2023.2.64-5.oe2403?arch=noarch&epoch=0&upstream=ca-certificates-2023.2.64-5.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://fedoraproject.org/wiki/CA-Certificates", "licenseDeclared": "Public Domain", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "The Mozilla CA root certificate bundle", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2023.2.64-5.oe2403" }, { "SPDXID": "SPDXRef-rpm-chkconfig-1.25", "name": "chkconfig", "licenseConcluded": "GPL-2.0-only", "checksums": [ { "algorithm": "SHA256", "checksumValue": "408310cc4ba2b5fa46657f71408c504f31f1fe0f0bbfa3efb34fca1f82be1519" } ], "description": "Chkconfig is a basic system utility. It updates and queries runlevel\ninformation for system services. Chkconfig manipulates the numerous\nsymbolic links in /etc/rc.d, to relieve system administrators of some\nof the drudgery of manually editing the symbolic links.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/chkconfig@1.25-2.oe2403?arch=x86_64&epoch=0&upstream=chkconfig-1.25-2.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-sysv/chkconfig", "licenseDeclared": "GPL-2.0-only", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "A system tool for maintaining the /etc/rc*.d hierarchy", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.25-2.oe2403" }, { "SPDXID": "SPDXRef-rpm-coreutils-9.4", "name": "coreutils", "licenseConcluded": "GPLv3+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "5adc2b57027700f62925bd520aab7a7347bb53535232a42c5b2bd34f637e77cf" } ], "description": "These are the GNU core utilities. This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403?arch=x86_64&epoch=0&upstream=coreutils-9.4-17.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gnu.org/software/coreutils/", "licenseDeclared": "GPLv3+", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "A set of basic GNU tools commonly used in shell scripts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:9.4-17.oe2403" }, { "SPDXID": "SPDXRef-rpm-cups-libs-2.4.7", "name": "cups-libs", "licenseConcluded": "Apache-2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "fb8fd62c8248fd940b5e3cd6c42867e57b664383c3bcd4f6540bc1be4e497765" } ], "description": "CUPS printing system provides a portable printing layer for\nUNIX® operating systems. It has been developed by Apple Inc.\nto promote a standard printing solution for all UNIX vendors and users.\nCUPS provides the System V and Berkeley command-line interfaces.\nThe cups-libs package provides libraries used by applications to use CUPS\nnatively, without needing the lp/lpr commands.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/cups-libs@2.4.7-10.oe2403?arch=x86_64&epoch=1&upstream=cups-2.4.7-10.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://openprinting.github.io/cups/", "licenseDeclared": "Apache-2.0", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "CUPS libs", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:2.4.7-10.oe2403" }, { "SPDXID": "SPDXRef-rpm-freetype-2.13.2", "name": "freetype", "licenseConcluded": "(FTL OR GPL-2.0-or-later) AND BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "2200f6618ce27937f187d460a73782021fb6e556d8d4fd966fd601231e41f391" } ], "description": "FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality\noutput (glyph images) of most vector and bitmap font formats", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/freetype@2.13.2-3.oe2403?arch=x86_64&epoch=0&upstream=freetype-2.13.2-3.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.freetype.org", "licenseDeclared": "(FTL OR GPL-2.0-or-later) AND BSD-3-Clause AND MIT AND MIT-Modern-Variant AND Zlib", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "FreeType is a freely available software library to render fonts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.13.2-3.oe2403" }, { "SPDXID": "SPDXRef-rpm-glibc-2.38", "name": "glibc", "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9c9d46dff23e85b1a909276e9dfa93ea5c35b9fa788ba716e1634854f582059e" } ], "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.gnu.org/software/glibc/", "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "The GNU libc libraries", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.38-101.oe2403" }, { "SPDXID": "SPDXRef-rpm-libgcc-12.3.1", "name": "libgcc", "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b1e41a2f5bb5c838ad36d4f01dc55f8760b526a8c7e42929568fdf364a897610" } ], "description": "This package contains GCC shared support library which is needed\ne.g. for exception handling support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libgcc@12.3.1-36.oe2403?arch=x86_64&epoch=0&upstream=gcc-12.3.1-36.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gcc.gnu.org", "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "GCC version 12 shared support library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:12.3.1-36.oe2403" }, { "SPDXID": "SPDXRef-rpm-libstdc---12.3.1", "name": "libstdc++", "licenseConcluded": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "dca90635da238eb1f508069fe3042c34584bab4d7518fa1637045045b918efee" } ], "description": "The libstdc++ package contains a rewritten standard compliant GCC Standard\nC++ Library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/libstdc++@12.3.1-36.oe2403?arch=x86_64&epoch=0&upstream=gcc-12.3.1-36.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gcc.gnu.org", "licenseDeclared": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "GNU Standard C++ Library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:12.3.1-36.oe2403" }, { "SPDXID": "SPDXRef-rpm-tzdata-java-2024a", "name": "tzdata-java", "licenseConcluded": "Public Domain", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d887098f2dd157261c232902a38f9987b9e26d82733952c4b71dfa97f3bbdd17" } ], "description": "This package contains timezone information for use by Java runtimes.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/tzdata-java@2024a-4.oe2403?arch=noarch&epoch=0&upstream=tzdata-2024a-4.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.iana.org/time-zones", "licenseDeclared": "Public Domain", "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2", "summary": "Timezone data for Java", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2024a-4.oe2403" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-ca-certificates-2023.2.64" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-chkconfig-1.25" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-cups-libs-2.4.7" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-freetype-2.13.2" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libgcc-12.3.1" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-libstdc---12.3.1" }, { "spdxElementId": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-tzdata-java-2024a" } ] }