tund/server
server@ecd7fb81802b
This is the linux/arm64 variant of a multi-arch index.
Pulling the index on a linux/arm64 machine fetches exactly this image.
It belongs to server:0.8, server:0.8.1, server@cf607569b0a4, so it cannot be deleted on its own: removing it would break that index. Delete the tag or the index and the next prune untagged run (or a retention policy) removes this entry; garbage collection reclaims its bytes.
docker pull chicor.ee/tund/server@sha256:ecd7fb81802b4d0158d48df62f7bca657b39a41a02b4e4211085aecba645c4a1- Digest
- ecd7fb81802b4d0158d4
- Media type
- application/vnd.oci.image.manifest.v1+json
- Platform
- linux/arm64
- Build attestations
- SLSA provenance v1
- Total size
- 18.0 MiB
- Pushed
- Oct 13, 2026byGitHub Actions · tund/github-ci
Cargo plan
4 layers18.0 MiB
| # | Instruction | Digest | Shared | Size |
|---|---|---|---|---|
| 1 | ADD alpine-minirootfs-3.22.6-aarch64.tar.gz / # buildkit | 16fc4f52163f | 3.9 MiB | |
| 2 | RUN /bin/sh -c apk add --no-cache ca-certificates tzdata && adduser -D -H -u 10001 tund && mkdir -p /data/certs && chown -R tund /data # buildkit | 9430b7c6d596 | 410 KiB | |
| 3 | COPY /out/tund-server /usr/local/bin/tund-server # buildkit | ba5c91ad9f97 | unique | 6.8 MiB |
| 4 | RUN /bin/sh -c apk add --no-cache libcap && setcap cap_net_bind_service=+ep /usr/local/bin/tund-server && apk del libcap # buildkit | 84c01e5d6be8 | unique | 6.8 MiB |
H 1M 33 unrated7 findings · scanned 11d ago with Trivy 0.74.0
3 of these findings carry a severity rating. The advisory source did not publish a severity. Unrated is not harmless. 2 of them have a fixed package version: rebuild the image to clear them.
| Severity | Vulnerability | Package | Fixed in | Type |
|---|---|---|---|---|
| High | CVE-2026-78669net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames | golang.org/x/net v0.58.0fixed in 0.60.0 | 0.60.0 | library |
| Medium | CVE-2026-78663net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server | golang.org/x/net v0.58.0fixed in 0.60.0 | 0.60.0 | library |
| Medium | CVE-2026-97032net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification | golang.org/x/net v0.58.0fixed in 0.60.0 | 0.60.0 | library |
| Medium | CVE-2026-85091zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... | zlib 1.3.2-r0fixed in 1.3.2-r1 | 1.3.2-r1 | os |
| unrated | GO-2026-5932The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues | golang.org/x/crypto v0.57.0no fix yet | no fix yet | library |
| unrated | CVE-2026-78659When "Trailer" headers are sent by a client, the HTTP server internall ... | golang.org/x/net v0.58.0fixed in 0.60.0 | 0.60.0 | library |
| unrated | CVE-2026-78660Historically, we have been rather lax about malformed framing-related ... | golang.org/x/net v0.58.0fixed in 0.60.0 | 0.60.0 | library |
{
"schemaVersion": 2,
"mediaType": "application/vnd.oci.image.manifest.v1+json",
"config": {
"mediaType": "application/vnd.oci.image.config.v1+json",
"digest": "sha256:0d424378a6b0e8dc15b58b4171638aa7a4c448d6fec803729dcd183b18d67c83",
"size": 2880
},
"layers": [
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:16fc4f52163f03cd2189c3d6a4b3f28a605cfb7919af64b3da4562cca69d2306",
"size": 4123084
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:9430b7c6d59626fdb936513548fe5d254e0959167a31e5ff6d56969bb8e5f455",
"size": 419390
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:ba5c91ad9f9799eec8b03dab90aeac9b64d8837de78af9c05bf5af7ed98006e3",
"size": 7148942
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:84c01e5d6be8728b50d0dc70c2b2aeb82f8395bae1b1ed533d74f6a93b71a7d5",
"size": 7178672
}
]
}