{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "podman-1.4.9.4-13.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-08-08T18:08:03.262096088Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/podman-1.4.9.4-13.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-podman-4.9.4",
      "name": "podman",
      "licenseConcluded": "Apache-2.0 and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "827ea5e85d7b59d2a2e4eac99e06ecca49436bfd7d2b0a374e7557f6fee63291"
        }
      ],
      "description": "Podman manages the entire container ecosystem which includes pods,\ncontainers, container images, and container volumes using the libpod library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/podman@4.9.4-13.oe2403?arch=x86_64&epoch=1&upstream=podman-4.9.4-13.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://podman.io/",
      "licenseDeclared": "Apache-2.0 and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "A tool for managing OCI containers and pods.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:4.9.4-13.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-crun-1.8.7",
      "name": "crun",
      "licenseConcluded": "GPL-2.0-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2cfa48dcb9a17af3ddd255d52c14b1269d84f9c5ad91a7b2df0889e6ff83596c"
        }
      ],
      "description": "crun is a fast and low-memory footprint OCI Container Runtime fully written in C.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/crun@1.8.7-3.oe2403?arch=x86_64&epoch=0&upstream=crun-1.8.7-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/containers/crun",
      "licenseDeclared": "GPL-2.0-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "A fast and low-memory footprint OCI Container Runtime fully written in C.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.7-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9c9d46dff23e85b1a909276e9dfa93ea5c35b9fa788ba716e1634854f582059e"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-iptables-1.8.9",
      "name": "iptables",
      "licenseConcluded": "GPL-2.0-only and Artistic-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "875b857951b9691b2d6f6d6ba712811ec8f179ebcd88466fffa1194e86b4fd01"
        }
      ],
      "description": "Netfilter is a set of hooks inside the Linux kernel that allows kernel\nmodules to register callback functions with the network stack. A\nregistered callback function is then called back for every packet that\ntraverses the respective hook within the network stack.\n\nIptables is a generic table structure for the definition of rulesets.\nEach rule within an IP table consists of a number of classifiers\n(iptables matches) and one connected action (iptables target).\n\nNetfilter, ip_tables, connection tracking (ip_conntrack, nf_conntrack)\nand the NAT subsystem together build the major parts of the framework.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/iptables@1.8.9-10.oe2403?arch=x86_64&epoch=0&upstream=iptables-1.8.9-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.netfilter.org/",
      "licenseDeclared": "GPL-2.0-only and Artistic-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "IP packet filter administration utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.9-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-nftables-1.0.8",
      "name": "nftables",
      "licenseConcluded": "GPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e343e75f1d097fa779af9c30cab439106a538ffa9848bc262c65bb7680a426a3"
        }
      ],
      "description": "nftables is a subsystem of the Linux kernel providing filtering and classification of\\\nnetwork packets/datagrams/frames.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/nftables@1.0.8-10.oe2403?arch=x86_64&epoch=1&upstream=nftables-1.0.8-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://netfilter.org/projects/nftables/",
      "licenseDeclared": "GPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "A subsystem of the Linux kernel processing network data",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.0.8-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-shadow-subid-devel-4.14.3",
      "name": "shadow-subid-devel",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "eae03b564326a8d00c80ee28f3fe68e94f6a1f2b2634761152a9dcc684f10fac"
        }
      ],
      "description": "Development files for shadow-utils-subid.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/shadow-subid-devel@4.14.3-8.oe2403?arch=x86_64&epoch=2&upstream=shadow-4.14.3-8.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://pkg-shadow.alioth.debian.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Development package for shadow-utils-subid",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:4.14.3-8.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-podman-4.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-crun-1.8.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-podman-4.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-podman-4.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-iptables-1.8.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-podman-4.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-nftables-1.0.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-podman-4.9.4",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-shadow-subid-devel-4.14.3"
    }
  ]
}