type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-25T18:33:37Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-25T18:33:37Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-be7b6e70-1d48-41c0-917e-e3614fbeb88d-specv3/SPDXRef-gnrtd36182
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd64
from: tomcat (SPDXRef-gnrtd36172)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36196
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd64
from: tomcat (SPDXRef-gnrtd36186)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36080
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd36081
from: springframework
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36115
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd64
from: tomcat (SPDXRef-gnrtd36107)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5413
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5414
from: java-11-openjdk-headless (SPDXRef-gnrtd5397)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5410
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5411
from: java-11-openjdk-headless (SPDXRef-gnrtd5397)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5447
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5448
from: java-11-openjdk-headless (SPDXRef-gnrtd5432)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36094
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd36095
from: springframework-beans
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36143
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd64
from: tomcat (SPDXRef-gnrtd36135)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36166
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd36167
from: springframework-expression
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36200
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd36201
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36130
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd64
from: tomcat (SPDXRef-gnrtd36120)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36077
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd36078
from: springframework
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36180
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd64
from: tomcat (SPDXRef-gnrtd36172)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5429
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5430
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5416)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36145
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd64
from: tomcat (SPDXRef-gnrtd36135)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36158
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd64
from: tomcat (SPDXRef-gnrtd36148)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36169
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd36170
from: springframework-expression
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36194
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd64
from: tomcat (SPDXRef-gnrtd36186)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5426
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5427
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5416)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36117
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd64
from: tomcat (SPDXRef-gnrtd36107)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36156
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd64
from: tomcat (SPDXRef-gnrtd36148)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5444
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5445
from: java-11-openjdk-headless (SPDXRef-gnrtd5432)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36103
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd36104
from: springframework-aop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5391
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5392
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5360)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36097
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd36098
from: springframework-beans
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5394
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5395
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5360)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36100
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd36101
from: springframework-aop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36197
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd36198
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36128
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd64
from: tomcat (SPDXRef-gnrtd36120)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36159
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: springframework-expression
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36184
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: springframework-beans
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36118
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5360)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36133
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5416)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36146
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5397)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36119
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd36120)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36134
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd36135)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36171
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd36172)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36106
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd36107)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36185
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd36186)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36132
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: springframework
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36183
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: springframework-aop
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36147
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd36148)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36131
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5432)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36104
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36098
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36198
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36095
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5395
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36078
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5427
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5411
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36081
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5448
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36201
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36170
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd64
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5445
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5414
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5392
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36101
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5430
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36167
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36096
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36195
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36079
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36199
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36144
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36168
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36102
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36181
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36157
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5412
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5428
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36129
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5446
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36116
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5393
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36082
type: software_Package
supplied by: SPDXRef-gnrtd36102
name: springframework-aop
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provode the Spring Aspect Oriented Framework
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The package is an enabling technology,it allows the implementation of custom aspects and provides declarative transaction management without EJB.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-aop@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5397
type: software_Package
supplied by: SPDXRef-gnrtd5412
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.27.6-1.oe2403sp1?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.27.6-1.oe2403sp1.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.27.6-1.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36105
type: software_Package
supplied by: SPDXRef-gnrtd36199
name: springframework-context
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provide the Spring Application Context
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The package is a complete superset of a bean factory, and adds enhanced capabilities to it, some of them more J2EE and enterprise-centric.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-context@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36072
type: software_Package
supplied by: SPDXRef-gnrtd36079
name: springframework
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software download location: NOASSERTION
summary: The Spring Java Application Framework
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The spring is based on code pubilshed in Expert One-on-One J2EE Design and Dvelopment by Rod Johnson (Wrox, 2002).it is a layered Java/J2ee application framework.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-core@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5360
type: software_Package
supplied by: SPDXRef-gnrtd5393
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.452.b09-2.oe2403sp1?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.452.b09-2.oe2403sp1.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.452.b09-2.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36107
type: software_Package
supplied by: SPDXRef-gnrtd36116
name: tomcat
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.117-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36160
type: software_Package
supplied by: SPDXRef-gnrtd36168
name: springframework-expression
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software download location: NOASSERTION
summary: Spring Expression Language (SpEL)
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The package is a powerful expression language that supports querying and manipulating an object graph at runtime.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-expression@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36120
type: software_Package
supplied by: SPDXRef-gnrtd36129
name: tomcat
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.118-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.118
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5416
type: software_Package
supplied by: SPDXRef-gnrtd5428
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.462.b08-3.oe2403sp1?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.462.b08-3.oe2403sp1.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.462.b08-3.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36172
type: software_Package
supplied by: SPDXRef-gnrtd36181
name: tomcat
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.100-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.100
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36186
type: software_Package
supplied by: SPDXRef-gnrtd36195
name: tomcat
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.115-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.115
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36088
type: software_Package
supplied by: SPDXRef-gnrtd36096
name: springframework-beans
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provide the Spring Bean Factory
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The Package provides an advanced configuration mechanism capable of managing beans of any nature, using potentially any kind of storage facility.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-beans@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36148
type: software_Package
supplied by: SPDXRef-gnrtd36157
name: tomcat
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.120-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.120
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5432
type: software_Package
supplied by: SPDXRef-gnrtd5446
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.31.11-0.oe2403sp1?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-0.oe2403sp1.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-0.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd36135
type: software_Package
supplied by: SPDXRef-gnrtd36144
name: tomcat
software source info: acquired package info from repodata DB: repodata/e802af2051d51f58c8fb57056c7b77a907c36b8f997e1a71f828dbf9d916677d-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.119-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.119
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0