type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-08-08T18:37:56Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-08-08T18:37:56Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP1/update/x86_64-b6bfb2a1-4f9a-4f20-a96a-8312bc1ad0da-specv3/SPDXRef-gnrtd37615
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd136
from: tomcat (SPDXRef-gnrtd37606)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37601
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd136
from: tomcat (SPDXRef-gnrtd37592)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37550
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd37551
from: springframework-beans
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5843
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5844
from: java-11-openjdk-headless (SPDXRef-gnrtd5831)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37559
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd37560
from: springframework-aop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37574
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd136
from: tomcat (SPDXRef-gnrtd37563)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5806
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5807
from: java-11-openjdk-headless (SPDXRef-gnrtd5794)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37617
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd136
from: tomcat (SPDXRef-gnrtd37606)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5772
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5773
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5741)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37661
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd37662
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37556
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd37557
from: springframework-aop
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37583
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd37584
from: springframework-expression
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37534
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd37535
from: springframework
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37664
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd37665
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5791
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5792
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5778)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5775
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5776
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5741)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37644
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd136
from: tomcat (SPDXRef-gnrtd37633)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37586
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd37587
from: springframework-expression
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5825
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5826
from: java-11-openjdk-headless (SPDXRef-gnrtd5812)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37572
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd136
from: tomcat (SPDXRef-gnrtd37563)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5828
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5829
from: java-11-openjdk-headless (SPDXRef-gnrtd5812)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5846
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5847
from: java-11-openjdk-headless (SPDXRef-gnrtd5831)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5809
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd5810
from: java-11-openjdk-headless (SPDXRef-gnrtd5794)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5788
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd5789
from: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5778)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37631
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd136
from: tomcat (SPDXRef-gnrtd37620)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37603
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd136
from: tomcat (SPDXRef-gnrtd37592)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37629
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd136
from: tomcat (SPDXRef-gnrtd37620)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37553
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd37554
from: springframework-beans
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37658
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd136
from: tomcat (SPDXRef-gnrtd37649)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37531
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd37532
from: springframework
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37660
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd136
from: tomcat (SPDXRef-gnrtd37649)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37642
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd136
from: tomcat (SPDXRef-gnrtd37633)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37562
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd37563)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37618
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5778)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37575
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: springframework-expression
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37646
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5831)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37604
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-1.8.0-openjdk-headless (SPDXRef-gnrtd5741)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37589
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: springframework-aop
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37645
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: springframework
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37647
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5794)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37588
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: springframework-beans
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37619
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd37620)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37590
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: java-11-openjdk-headless (SPDXRef-gnrtd5812)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37648
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd37649)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37632
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd37633)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37605
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd37606)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37591
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: tomcat (SPDXRef-gnrtd37592)
from: springframework-context
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37554
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5847
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5773
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37584
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37587
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37557
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5844
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37560
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5807
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd136
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37532
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5829
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5826
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37662
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37665
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5776
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5792
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5810
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37535
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37551
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5789
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37573
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5845
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5808
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37659
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37643
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37602
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5774
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37630
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37585
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37552
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37616
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5790
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5827
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37663
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37533
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37558
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37563
type: software_Package
supplied by: SPDXRef-gnrtd37573
name: tomcat
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.100-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.100
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.100
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37536
type: software_Package
supplied by: SPDXRef-gnrtd37558
name: springframework-aop
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provode the Spring Aspect Oriented Framework
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The package is an enabling technology,it allows the implementation of custom aspects and provides declarative transaction management without EJB.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-aop@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37525
type: software_Package
supplied by: SPDXRef-gnrtd37533
name: springframework
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software download location: NOASSERTION
summary: The Spring Java Application Framework
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The spring is based on code pubilshed in Expert One-on-One J2EE Design and Dvelopment by Rod Johnson (Wrox, 2002).it is a layered Java/J2ee application framework.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-core@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5812
type: software_Package
supplied by: SPDXRef-gnrtd5827
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.27.6-1.oe2403sp1?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.27.6-1.oe2403sp1.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.27.6-1.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37620
type: software_Package
supplied by: SPDXRef-gnrtd37630
name: tomcat
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.117-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.117
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.117
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5741
type: software_Package
supplied by: SPDXRef-gnrtd5774
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.462.b08-3.oe2403sp1?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.462.b08-3.oe2403sp1.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.462.b08-3.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5778
type: software_Package
supplied by: SPDXRef-gnrtd5790
name: java-1.8.0-openjdk-headless
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.452.b09-2.oe2403sp1?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.452.b09-2.oe2403sp1.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 8
software package version: 1:1.8.0.452.b09-2.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 8 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37649
type: software_Package
supplied by: SPDXRef-gnrtd37659
name: tomcat
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.120-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37576
type: software_Package
supplied by: SPDXRef-gnrtd37585
name: springframework-expression
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software download location: NOASSERTION
summary: Spring Expression Language (SpEL)
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The package is a powerful expression language that supports querying and manipulating an object graph at runtime.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-expression@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37592
type: software_Package
supplied by: SPDXRef-gnrtd37602
name: tomcat
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.119-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.119
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.119
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5831
type: software_Package
supplied by: SPDXRef-gnrtd5845
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.32.9-0.oe2403sp1?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.32.9-0.oe2403sp1.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.32.9-0.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37543
type: software_Package
supplied by: SPDXRef-gnrtd37552
name: springframework-beans
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provide the Spring Bean Factory
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The Package provides an advanced configuration mechanism capable of managing beans of any nature, using potentially any kind of storage facility.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-beans@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37606
type: software_Package
supplied by: SPDXRef-gnrtd37616
name: tomcat
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.118-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.118
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.118
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37561
type: software_Package
supplied by: SPDXRef-gnrtd37663
name: springframework-context
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software download location: NOASSERTION
summary: Provide the Spring Application Context
software package version: 0:3.2.18-15.oe2403sp1
software home page: http://projects.spring.io/spring-framework/
description: The package is a complete superset of a bean factory, and adds enhanced capabilities to it, some of them more J2EE and enterprise-centric.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.springframework/spring-context@3.2.18.RELEASE
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd5794
type: software_Package
supplied by: SPDXRef-gnrtd5808
name: java-11-openjdk-headless
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software package url: pkg:rpm/java-11-openjdk-headless@11.0.31.11-0.oe2403sp1?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-0.oe2403sp1.src.rpm
software download location: NOASSERTION
summary: OpenJDK Headless Runtime Environment 11
software package version: 1:11.0.31.11-0.oe2403sp1
software home page: http://openjdk.java.net/
description: The OpenJDK runtime environment 11 without audio and video support.
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd37633
type: software_Package
supplied by: SPDXRef-gnrtd37643
name: tomcat
software source info: acquired package info from repodata DB: repodata/1b484c8eb5b8229fba6b5a5b11fe895b7104760061a10c49a7af41194c2b52a2-primary.sqlite.bz2
software download location: NOASSERTION
summary: Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
software package version: 1:9.0.115-1.oe2403sp1
software home page: http://tomcat.apache.org/
description: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-juli@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.apache.tomcat/tomcat-jni@9.0.115
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=EXTERNAL_MANAGER;v2_refType=checksum
  external ref type: other
external ref:
  type: ExternalRef
  comment: v2_refCategory=PROVIDE_MANAGER;v2_refType=purl
  locator: pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.115
  external ref type: other
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0