{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-11-15T21:38:58Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-docker-moby-0f221f75-696d-512f-ac3d-7e485360eb18", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "d7e2bfa7ebbce4d6cf5c1f85695b919a78830d44"}, "externalDocumentId": "DocumentRef-dependency-recipe-base-files", "spdxDocument": "http://spdx.org/spdxdocs/recipe-base-files-c146050a-959a-5836-966f-98e79d6e765f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "d657671bd66110bfd34c7f8a4f507f1f620560ea"}, "externalDocumentId": "DocumentRef-dependency-recipe-base-passwd", "spdxDocument": "http://spdx.org/spdxdocs/recipe-base-passwd-bb3f3152-7b84-5ef0-95bd-04186ff304e1"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "cc4bb285cce28f14a670048c2ba395d4fb76e522"}, "externalDocumentId": "DocumentRef-dependency-recipe-btrfs-tools", "spdxDocument": "http://spdx.org/spdxdocs/recipe-btrfs-tools-bc5bebd6-136e-537c-ab8a-e726364ec661"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5a8d44f74dc1c26c3dcb53cfa54b4ac56edec50e"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c0b482c6d3b1fcb5f7dcf5953b314e29e77cb821"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "2568d3a1f1711d26e11b72f80ac46993ef240e1c"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "9af16183ddbef8828bed8456b1a8ab0ce78a65e0"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-cross-cortexa72-cortexa53", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-cross-cortexa72-cortexa53-2c98fa9b-fac4-5281-8341-8dc08e1c6c3a"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "0b56df066d1f0cb636e35362727dcb267f4569cf"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-runtime-393054ae-505a-5f30-8e3b-75c9021ab3f5"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "03de34855a633b8c44146f5ce28d0c83175d9076"}, "externalDocumentId": "DocumentRef-dependency-recipe-libseccomp", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libseccomp-7ffe5687-651c-5e5e-9064-62cb4834fa8a"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "4f8df07bfc30a90b85c8cda9252fb268cfaffbb0"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-8bfaa686-3182-5735-94fe-e31cb0308d17"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "b2e1fad7c15c14c18ef72d8acf5268c6f8114b47"}, "externalDocumentId": "DocumentRef-dependency-recipe-libtool-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libtool-native-af5e5210-5bed-5317-878d-15206849f191"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "1c0df6146e5388a9910ecf9ff80ce54dbaa07bd9"}, "externalDocumentId": "DocumentRef-dependency-recipe-lvm2", "spdxDocument": "http://spdx.org/spdxdocs/recipe-lvm2-1680e8fa-6311-5209-bee8-8be8f7a6e359"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "3139ac97d07843a70a47fe8f42a70652ec72f69f"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "963a2692f13f85ebb9217e1d1baf8ef6dc22b53c"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-6845d95c-0853-56dd-b976-caae5a99461e"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "4b3d670a6c4dc8aebc8676dccc26c507960efc8f"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-native-8f9e05bf-71e7-5a75-a2e0-b8f7479cc53d"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "7c0e666f933d55d16752849fcb1e14efa3212b3d"}, "externalDocumentId": "DocumentRef-dependency-recipe-shadow-sysroot", "spdxDocument": "http://spdx.org/spdxdocs/recipe-shadow-sysroot-b6b6920a-50f2-5a27-a753-5106a834f19f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "5980fc833b935bd5d0566b14ef2b8e8710c4b6ed"}, "externalDocumentId": "DocumentRef-dependency-recipe-sqlite3", "spdxDocument": "http://spdx.org/spdxdocs/recipe-sqlite3-ddb15355-31cb-5efc-bc2f-344348b1afbe"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "06f705747fa83069bdb73878f2d0805ebeeb046a"}, "externalDocumentId": "DocumentRef-dependency-recipe-systemd-systemctl-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-systemd-systemctl-native-2f3d50ae-528c-5654-b3e7-3b2e2de42e45"}], "name": "recipe-docker-moby", "packages": [{"SPDXID": "SPDXRef-Recipe-docker-moby", "copyrightText": "NOASSERTION", "description": "Linux container runtime  Docker complements kernel namespacing with a high-level API which  operates at the process level. It runs unix processes with strong  guarantees of isolation and repeatability across servers.  .  Docker is a great building block for automating distributed systems:  large-scale web deployments, database clusters, continuous deployment  systems, private PaaS, service-oriented architectures, etc.  .  This package contains the daemon and client, which are  officially supported on x86_64 and arm hosts.  Other architectures are considered experimental.  .  Also, note that kernel version 3.10 or above is required for proper  operation of the daemon process, and that any lower versions may have  subtle and/or glaring issues.  ", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:docker:25.0.3:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}, {"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:mobyproject:moby:25.0.3:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "http://www.docker.com", "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "licenseInfoFromFiles": ["NOASSERTION"], "name": "docker-moby", "sourceInfo": "CVEs fixed: CVE-2024-36620 CVE-2024-36621", "summary": "Linux container runtime", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "25.0.3+gitf417435e5f6216828dec57958c490c4f8bae4f98"}, {"SPDXID": "SPDXRef-Download-docker-moby-1", "copyrightText": "NOASSERTION", "downloadLocation": "git+https://github.com/moby/moby.git@f417435e5f6216828dec57958c490c4f8bae4f98", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "docker-moby-source-1", "supplier": "NOASSERTION"}, {"SPDXID": "SPDXRef-Download-docker-moby-2", "copyrightText": "NOASSERTION", "downloadLocation": "git+https://github.com/docker/libnetwork.git@67e0588f1ddfaf2faf4c8cae8b7ea2876434d91c", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "docker-moby-source-2", "supplier": "NOASSERTION"}, {"SPDXID": "SPDXRef-Download-docker-moby-3", "copyrightText": "NOASSERTION", "downloadLocation": "git+https://github.com/docker/cli@01f933261885c0126edb3f47fd56d048ae31265a", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "docker-moby-source-3", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-docker-moby-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-docker-moby-1"}, {"relatedSpdxElement": "SPDXRef-Download-docker-moby-2", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-docker-moby-2"}, {"relatedSpdxElement": "SPDXRef-Download-docker-moby-3", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-docker-moby-3"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-base-files:SPDXRef-Recipe-base-files"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-base-passwd:SPDXRef-Recipe-base-passwd"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-btrfs-tools:SPDXRef-Recipe-btrfs-tools"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-cross-cortexa72-cortexa53:SPDXRef-Recipe-go-cross-cortexa72-cortexa53"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-runtime:SPDXRef-Recipe-go-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libseccomp:SPDXRef-Recipe-libseccomp"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool:SPDXRef-Recipe-libtool"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libtool-native:SPDXRef-Recipe-libtool-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-lvm2:SPDXRef-Recipe-lvm2"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow:SPDXRef-Recipe-shadow"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow-native:SPDXRef-Recipe-shadow-native"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-shadow-sysroot:SPDXRef-Recipe-shadow-sysroot"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-sqlite3:SPDXRef-Recipe-sqlite3"}, {"relatedSpdxElement": "SPDXRef-Recipe-docker-moby", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-systemd-systemctl-native:SPDXRef-Recipe-systemd-systemctl-native"}], "spdxVersion": "SPDX-2.2"}