{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2026-06-06T18:08:56Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-podman-1ef72bd5-89b8-5803-a5bd-537393ff4fe3", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "b673e159f94b3a12df9854d964495640adf2b67c"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "bea3135e31acb0fc740a62557f21527c31a15ca5"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "82c76ed5771070d5a252cf658ea67a33dbbe5134"}, "externalDocumentId": "DocumentRef-dependency-recipe-gettext-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gettext-native-bc0b5e4e-69c4-5def-955c-45419d0a98ee"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d725f06c2ebed554ba90ab3489e220528c9c8c7a"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a6048fa86951048b6a224b27405c79402131931a"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-cross-cortexa72-cortexa53", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-cross-cortexa72-cortexa53-2c98fa9b-fac4-5281-8341-8dc08e1c6c3a"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "bc2794f4215d957c358734b9cdeeaabadf4c791e"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-metalinter-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-metalinter-native-1940c6ad-8a49-520a-bcb6-cf5acbcd4e3c"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d6fb099d686af6249fa6a2541ad70db396a56ce6"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-runtime-393054ae-505a-5f30-8e3b-75c9021ab3f5"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c8394dc09185b87436aa2112ec84d98113f1ddcd"}, "externalDocumentId": "DocumentRef-dependency-recipe-gpgme", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gpgme-9f25480d-e8ef-525f-97a2-7dd4a9e31950"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "39900fd0c336c7f1b6fb6b59e9a20ca0facff656"}, "externalDocumentId": "DocumentRef-dependency-recipe-libseccomp", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libseccomp-7ffe5687-651c-5e5e-9064-62cb4834fa8a"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a518fedb3b8899646cdb8d0055beb6dcccb87b88"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1a96de1c886510e529a7451d0f4a423fa9ae9421"}, "externalDocumentId": "DocumentRef-dependency-recipe-systemd", "spdxDocument": "http://spdx.org/spdxdocs/recipe-systemd-9a30b9ed-a145-56fe-863a-756f27954858"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c87cc41e165e2a5df8d1e274e24de8ce190297e6"}, "externalDocumentId": "DocumentRef-dependency-recipe-systemd-systemctl-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-systemd-systemctl-native-2f3d50ae-528c-5654-b3e7-3b2e2de42e45"}], "name": "recipe-podman", "packages": [{"SPDXID": "SPDXRef-Recipe-podman", "copyrightText": "NOASSERTION", "description": "Podman is a daemonless container engine for developing,     managing, and running OCI Containers on your Linux System. Containers can     either be run as root or in rootless mode. Simply put:     `alias docker=podman`.     ", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:podman:5.0.1:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "https://podman.io/", "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "licenseInfoFromFiles": ["NOASSERTION"], "name": "podman", "sourceInfo": "CVEs fixed: CVE-2023-0778 CVE-2022-2989 CVE-2025-6032 CVE-2024-9676 CVE-2024-9341", "summary": "A daemonless container engine", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "5.0.1+git"}, {"SPDXID": "SPDXRef-Download-podman-1", "copyrightText": "NOASSERTION", "downloadLocation": "git+https://github.com/containers/libpod.git@bb81e85a430fa95d23a15b77c717fd68bf06ebf2", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "podman-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-podman-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-podman-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gettext-native:SPDXRef-Recipe-gettext-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-cross-cortexa72-cortexa53:SPDXRef-Recipe-go-cross-cortexa72-cortexa53"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-metalinter-native:SPDXRef-Recipe-go-metalinter-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-runtime:SPDXRef-Recipe-go-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gpgme:SPDXRef-Recipe-gpgme"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libseccomp:SPDXRef-Recipe-libseccomp"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-systemd:SPDXRef-Recipe-systemd"}, {"relatedSpdxElement": "SPDXRef-Recipe-podman", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-systemd-systemctl-native:SPDXRef-Recipe-systemd-systemctl-native"}], "spdxVersion": "SPDX-2.2"}