{ "SPDXID": "SPDXRef-DOCUMENT", "name": "tomcatjss-0.8.2.0-2.oe2403sp3.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-05-14T09:44:25.182336603Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/tomcatjss-0.8.2.0-2.oe2403sp3.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-apache-commons-lang3-3.18.0", "name": "apache-commons-lang3", "checksums": [ { "algorithm": "SHA256", "checksumValue": "03ef7a1873df7205152fca26e8a34f2b5ffa3aea316d4a570f3b79b40179d0de" } ], "description": "The standard Java libraries fail to provide enough methods for\nmanipulation of its core classes. The Commons Lang Component provides\nthese extra methods.\nLang provides a host of helper utilities for the java.lang API,\nnotably String manipulation methods, basic numerical methods, object\nreflection, concurrency, creation and serialization and System\nproperties. Additionally it contains basic enhancements to\njava.util.Date and a series of utilities dedicated to help with\nbuilding methods, such as hashCode, toString and equals.\nNote that Lang 3.0 (and subsequent versions) use a different\npackage (org.apache.commons.lang3) than the previous\nversions (org.apache.commons.lang), allowing it to be used at the same\ntime as an earlier version.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/apache-commons-lang3@3.18.0-1.oe2403sp3?arch=noarch&epoch=0&upstream=apache-commons-lang3-3.18.0-1.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-lang3@3.18.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://commons.apache.org/proper/commons-lang/", "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2", "summary": "Apache Commons Lang version 3.0", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.18.0-1.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-java-latest-openjdk-headless-23.0.1.11", "name": "java-latest-openjdk-headless", "checksums": [ { "algorithm": "SHA256", "checksumValue": "87ef04885c7a25da1997f619eb09f90f420316c41f25f06acd878d6952b7c318" } ], "description": "The OpenJDK runtime environment 23 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-latest-openjdk-headless@23.0.1.11-4.oe2403sp3?arch=aarch64&epoch=1&upstream=java-latest-openjdk-23.0.1.11-4.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/64e3afc17a6fc3e45dca455c758c5433be9a411b@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 23", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:23.0.1.11-4.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-javapackages-tools-5.3.0", "name": "javapackages-tools", "checksums": [ { "algorithm": "SHA256", "checksumValue": "2314902f8e705d1ec72f93bddc97551b21bafdf786ea3c01bfa1235c8cc5158a" } ], "description": "The javapackages-tools package contains macros and scripts to support Java packaging.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-tools@5.3.0-6.oe2403sp3?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.sun/tools@SYSTEM", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/sun.jdk/jconsole@SYSTEM", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2", "summary": "Support for Java packaging with macros and scripts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-jss-5.4.2", "name": "jss", "checksums": [ { "algorithm": "SHA256", "checksumValue": "6e699829bc694c1cb7ded717226b7ba77931a9bcd1da4df07155af89ad435348" } ], "description": "JSS offers a implementation for java-based applications to use native NSS.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/jss@5.4.2-2.oe2403sp3?arch=aarch64&epoch=0&upstream=jss-5.4.2-2.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.dogtagpki.org/wiki/JSS", "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2", "summary": "Java Security Services", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.4.2-2.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-slf4j-1.7.25", "name": "slf4j", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d54c6b9b734d45ddf6df1226c46951e348357ac5ac8afe4212dc07cb4e39e547" } ], "description": "The Simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various\nlogging frameworks (e.g. java.util.logging, logback, log4j) allowing the end user to plug in the\ndesired logging framework at deployment time.Before you start using SLF4J, we highly recommend\nthat you read the two-page SLF4J user manual. Note that SLF4J-enabling your library implies the\naddition of only a single mandatory dependency, namely slf4j-api.jar. If no binding is found on\nthe class path, then SLF4J will default to a no-operation implementation. In case you wish to\nmigrate your Java source files to SLF4J, consider our migrator tool which can migrate your project\nto use the SLF4J API in just a few minutes. In case an externally-maintained component you depend\non uses a logging API other than SLF4J, such as commons logging, log4j or java.util.logging, have\na look at SLF4J's binary-support for legacy APIs.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/slf4j@1.7.25-8.oe2403sp3?arch=noarch&epoch=0&upstream=slf4j-1.7.25-8.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.slf4j/slf4j-nop@1.7.25", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.slf4j/slf4j-simple@1.7.25", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.slf4j/slf4j-api@1.7.25", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.slf4j.org/", "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2", "summary": "Simple Logging Facade for Java(SLF4J)", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.7.25-8.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-slf4j-jdk14-1.7.25", "name": "slf4j-jdk14", "checksums": [ { "algorithm": "SHA256", "checksumValue": "e562e5579df1293f4db236969d3d2677e1e9e7e10c03a58210ff1482f70f26f0" } ], "description": "JDK14 Binding of SLF4J.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/slf4j-jdk14@1.7.25-8.oe2403sp3?arch=noarch&epoch=0&upstream=slf4j-1.7.25-8.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.slf4j/slf4j-jdk14@1.7.25", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.slf4j.org/", "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2", "summary": "JDK14 Binding of SLF4J", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.7.25-8.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-tomcat-9.0.100", "name": "tomcat", "checksums": [ { "algorithm": "SHA256", "checksumValue": "ae9afd698d942c4372635fb47d8c90bee0ee22e471c165bbde298b489ca53ee4" } ], "description": "Tomcat is the servlet container that is used in the official Reference\nImplementation for the Java Servlet and JavaServer Pages technologies.\nThe Java Servlet and JavaServer Pages specifications are developed by\nSun under the Java Community Process.\n\nTomcat is developed in an open and participatory environment and\nreleased under the Apache Software License version 2.0. Tomcat is intended\nto be a collaboration of the best-of-breed developers from around the world.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/tomcat@9.0.100-9.oe2403sp3?arch=noarch&epoch=1&upstream=tomcat-9.0.100-9.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-api@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jni@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.100", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util@9.0.100", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/fdd433525df638af6f8d628ea289750e808a7361@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/2c18d3a04904fd45ef0950d4026ff3acda9fb701@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://tomcat.apache.org/", "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2", "summary": "Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:9.0.100-9.oe2403sp3" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-apache-commons-lang3-3.18.0" }, { "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-latest-openjdk-headless-23.0.1.11" }, { "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-tools-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-jss-5.4.2" }, { "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-slf4j-1.7.25" }, { "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-slf4j-jdk14-1.7.25" }, { "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-tomcat-9.0.100" } ] }