Cloudsmith - Repositories - Tetrate (tetrate) - getistio-containers (getistio-containers) - ztunnel

Package Search Help

You can use boolean logic (e.g. AND/OR/NOT) for complex search queries. For more help and examples, see the search documentation.

Search by package name:
my-package _(implicit)
name:my-package _(explicit)

Search by package filename:
filename:my-package.ext

Search by package tag:
tag:latest

Search by package version:
version:1.0.0 prerelease:true _{(prereleases)}
prerelease:false _{(no prereleases)}

Search by package architecture:
architecture:x86_64

Search by package distribution:
distribution:el

Search by package license:
license:MIT

Search by package format:
format:deb

Search by package status:
status:in_progress

Search by package file checksum:
checksum:5afba

Search by package security status:
severity:critical

Search by package vulnerabilities:
vulnerabilities:>1
vulnerabilities:<1000

Search by # of package downloads:
downloads:>8
downloads:<100

Search by package type:
type:binary
type:source

Search by package size (bytes):
size:>50000
size:<10000

Search by dependency name/version:
dependency:log4j
dependency:log4j=1.0.0
dependency:log4j>1.0.0

Search by uploaded date:
uploaded:>"1 day ago"
uploaded:<"August 14, 2022 EST"

Search by entitlement token (identifier):
entitlement:3lKPVJPosCsY

Search by policy violation:
policy_violated:true
deny_policy_violated:true
license_policy_violated:true
vulnerability_policy_violated:true

Search by repository:
repository:repo-name

Search by last download date:
last_downloaded:<"30 days ago"
last_downloaded:>"August 14, 2022 EST"

Search queries for all Debian-specific (and related) package types

Search by component:
deb_component:unstable

Search queries for all Maven-specific (and related) package types

Search by group ID:
maven_group_id:org.apache

Search queries for all Docker-specific (and related) package types

Search by image digest:
docker_image_digest:sha256:7c5..6d4
(full hashref only)

Search by layer digest:
docker_layer_digest:sha256:4c4..ae4
(full hashref only)

Search queries for all Generic-specific package types

Search by file path:
generic_filepath:path/to/file.txt

Search by directory:
generic_directory:path/to

Field type modifiers (depending on the type, you can influence behaviour)

For all queries, you can use:
~foo for negation

For string queries, you can use:
^foo to anchor to start of term
foo$ to anchor to end of term
foo*bar for fuzzy matching

For number/date or version queries, you can use:
>foo for values greater than
>=foo for values greater / equal
<foo for values less than
<=foo for values less / equal

Need a secure and centralised artifact repository to deliver Alpine, Cargo, CocoaPods, Composer, Conan, Conda, CRAN, Dart, Debian, Docker, Generic, Go, Helm, Hex, HuggingFace, LuaRocks, Maven, MCP, npm, NuGet, P2, Python, RedHat, Ruby, Swift, Terraform, Vagrant, VSX, Raw & More packages?

Cloudsmith is the new standard in Package / Artifact Management and Software Distribution.

With support for all major package formats, you can trust us to manage your software supply chain.

Start My Free Trial

Set Me Up

Public — tetrate (Tetrate) / getistio-containers

Tetrate Istio Distro project (formerly GetIstio) container images registry

ztunnel f28945ceefe0c64cfb1a2ceaa0b…

Download

One-liner (summary)

A certifiably-awesome package curated by Bender Rodriguez, hosted by Cloudsmith.

Description

A certifiably-awesome package curated by Bender Rodriguez, hosted by Cloudsmith.

License

Unknown

Size

14.4 MB

Downloads

Tags

image arm64 linux

Status	Completed
Checksum (MD5)	d0db8b13bbb5fac41cfdfe907b8c0bd9
Checksum (SHA-1)	8ecfb15af9f3768ae26f977e0495150642a84f5d
Checksum (SHA-256)	f28945ceefe0c64cfb1a2ceaa0bb2b9bb705f6c723e8a3dc737fc787ffb065b2
Checksum (SHA-512)	e613e6572741063f1e8a243ad6a3bd8c85295cbf35f2c937f57ba9622f4264e7b5…
GPG Signature	Download
GPG Fingerprint	7490c226a7c21a19bb1d09e800b3a57eef287d7b
Storage Region	Dublin, Ireland
Type	Binary (contains binaries and binary artifacts)
Uploaded At	3 months ago
Uploaded By
Slug Id	ztunnel-gp77
Unique Id	Z5uPIkCX3sJq
Version (Raw)	f28945ceefe0c64cfb1a2ceaa0bb2b9bb705f6c723e8a3dc737fc787ffb065b2
Version (Parsed)	Type: Unknown
	docker-specific metadata
Image Digest	sha256:f28945ceefe0c64cfb1a2ceaa0bb2b9bb705f6c723e8a3dc737fc787ffb065b2
Config Digest	sha256:9f719977084ce75e6f63d50acc44fcee6e78e33d2429f9c2e44d373d6df80f99
V1 OCI Index Digest	sha256:92f27cf45a7115963f2a9173a2badf014dc5714a9e61408f4c9c4d82047b77ba
V1 Distribution (Signed) Digest	sha256:c516f49f4c5cc96c6bd2cf5cf2d3848927ad627ef674dc5fbb71686e51a68da9
V1 OCI Digest	sha256:3e5fe368d1c64640b027a08dcf9c60f2e19df84f644ed10d991f33285a2ca4ee
V2 Distribution List Digest	sha256:4d72290ad81f5ec2d404b0efa9822ba6a5d88e14f8e29beb1c5fdeebd49f6fb6
V1 Distribution Digest	sha256:164508725abc71ff4d1c395a09ed51facf912af91bd95c8f43c85fbfecfcdd4b
V2 Distribution Digest	sha256:f28945ceefe0c64cfb1a2ceaa0bb2b9bb705f6c723e8a3dc737fc787ffb065b2
	extended metadata
Manifest Type	V2 Distribution
Architecture	arm64
Config	Entrypoint /usr/local/bin/ztunnel Env ISTIO_META_ISTIO_VERSION=1.28.6-tetrate0 \| PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin Working Dir /
Created	2026-04-20 17:21:56 UTC
Os	linux

This package was uploaded with the following V2 Distribution manifest:

{"schemaVersion":2,"mediaType":"application/vnd.docker.distribution.manifest.v2+json","config":{"mediaType":"application/vnd.docker.container.image.v1+json","size":1956,"digest":"sha256:790731c92438bf55b6983e34e8e85a449699ca68fdd47f1b0ee8afab839d6c53"},"layers":[{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","size":8318932,"digest":"sha256:ddfe3bad595613a1a2f623e3e3069d56084b3d9e90fc55864015ab15f364696f"},{"mediaType":"application/vnd.docker.image.rootfs.diff.tar.gzip","size":6829001,"digest":"sha256:0f282dc6efbc127b8ef9c17ffe4e3a669e858dd16ed6a19d20ae84ab05713697"}]}

	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: ARG MICRO	32 bytes
	Digest: sha256:ddfe3bad595613a1a2f623e3e3069d56084b3d9e90fc55864015ab15f364696f Command: COPY /micro . # buildkit	7.9 MB
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: WORKDIR /	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: ARG istio_version	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: ARG TARGETARCH	32 bytes
	Digest: sha256:0f282dc6efbc127b8ef9c17ffe4e3a669e858dd16ed6a19d20ae84ab05713697 Command: COPY arm64/ztunnel /usr/local/bin/ztunnel # buildkit	6.5 MB
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: ENV ISTIO_META_ISTIO_VERSION=1.28.6-tetrate0	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: ENTRYPOINT ["/usr/local/bin/ztunnel"]	32 bytes

ztunnel fa3275a3986909fd1e064239da1412f740ddb92…	image amd64 linux 14.5 MB — 3 months, 2 weeks ago	1
ztunnel fa34d37a1a55841a47c99fe29024448c8e1be0f…	image arm64 linux 14.3 MB — 3 months, 2 weeks ago	2
ztunnel f814caa700634c59db285d881bf0426cc01acfb…	image amd64 linux 14.3 MB — 3 months, 2 weeks ago	2
ztunnel fa9b942bd8e718e7fef0e142a7c72a942af6af3…	image arm64 linux 93.0 MB — 4 months, 1 week ago	27712
ztunnel f51314ff6d9408f4a592327494fc23a2034ee06…	image amd64 linux 91.4 MB — 4 months, 3 weeks ago	3
ztunnel fdd11089292bf1e0cc6c59a30756eae46b36cf8…	image arm64 linux 14.2 MB — 5 months, 1 week ago	4
ztunnel fff24c16dee64197ee157fbf581d58efb0b7fa6…	image arm64 linux 14.1 MB — 5 months, 1 week ago	2
ztunnel fd315f2a1444ebad1b18012f5027f3aed1e25ef…	image arm64 linux 91.4 MB — 5 months, 2 weeks ago	3
ztunnel f48e8c0eb5ee52154ffe1159c45d7464e9a5015…	image amd64 linux 87.4 MB — 7 months, 2 weeks ago	5
ztunnel f4dd928d50a0ea2d593d2979e8e4b3b4d37aec9…	image arm64 linux 88.3 MB — 7 months, 2 weeks ago	27867
ztunnel f28945ceefe0c64cfb1a2ceaa0bb2b9bb705f6c…	image arm64 linux 14.4 MB — 3 months ago	1
ztunnel 247ea7ce653c6e0c2ee9f487fb30256b230720f…	image arm64 linux 14.4 MB — 1 day, 3 hours ago	0
ztunnel de863f515444e6ca1741570f721b782a7bd2b3f…	image amd64 linux 15.4 MB — 1 day, 3 hours ago	0
ztunnel c6104752d1ce4958c704862e3a859f72bb3bda5…	image arm64 linux 13.2 MB — 1 day, 3 hours ago	0
ztunnel b899e15daeb8fdd3731d9b4eaefd62a582122c4…	image amd64 linux 14.4 MB — 1 day, 3 hours ago	0
ztunnel 7c4e7e431613aca592c6badb419d44992ca4dee…	image amd64 linux 88.1 MB — 1 day, 3 hours ago	0
ztunnel 89721cff387380e97cef80cbe2078341b1bb26a…	image arm64 linux 88.1 MB — 1 day, 3 hours ago	0
ztunnel 7e2c28ef279fee2196e442d47ad3b3d8428d52c…	image arm64 linux 13.2 MB — 1 day, 8 hours ago	0
ztunnel 9c291f4552f36f6ae87d88108212f39b1b2d485…	image amd64 linux 14.4 MB — 1 day, 8 hours ago	0
ztunnel dc444594557593f20ec8fb8c62fad821daf21bf…	image arm64 linux 88.1 MB — 1 day, 8 hours ago	1

Only packages within the same repository are displayed. The current package you're viewing is highlighted.

Last scanned

3 months ago

Scan result

Vulnerable

Vulnerability count

Max. severity

High

Target:	Z5uPIkCX3sJq.sbom-cyclonedx.json (redhat 9.7)
HIGH	CVE-2026-4878: libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation. Package Name: libcap Installed Version: 2.48-10.el9 Fixed Version: References: www.openwall.com www.openwall.com www.openwall.com www.openwall.com www.openwall.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com nvd.nist.gov www.cve.org
MEDIUM	CVE-2025-5278: coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data. Package Name: coreutils-single Installed Version: 8.32-39.el9 Fixed Version: References: www.openwall.com www.openwall.com www.openwall.com access.redhat.com bugzilla.redhat.com cgit.git.savannah.gnu.org cgit.git.savannah.gnu.org nvd.nist.gov security-tracker.debian.org www.cve.org
MEDIUM	CVE-2026-4046: glibc: glibc: Denial of Service via iconv() function with specific character sets The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them. Package Name: glibc Installed Version: 2.34-231.el9_7.10 Fixed Version: References: access.redhat.com nvd.nist.gov packages.fedoraproject.org sourceware.org sourceware.org www.cve.org
MEDIUM	CVE-2026-4437: glibc: glibc: Incorrect DNS response parsing via crafted DNS server response Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer. Package Name: glibc Installed Version: 2.34-231.el9_7.10 Fixed Version: References: access.redhat.com nvd.nist.gov sourceware.org www.cve.org
MEDIUM	CVE-2026-4046: glibc: glibc: Denial of Service via iconv() function with specific character sets The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them. Package Name: glibc-common Installed Version: 2.34-231.el9_7.10 Fixed Version: References: access.redhat.com nvd.nist.gov packages.fedoraproject.org sourceware.org sourceware.org www.cve.org
MEDIUM	CVE-2026-4437: glibc: glibc: Incorrect DNS response parsing via crafted DNS server response Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer. Package Name: glibc-common Installed Version: 2.34-231.el9_7.10 Fixed Version: References: access.redhat.com nvd.nist.gov sourceware.org www.cve.org
MEDIUM	CVE-2026-4046: glibc: glibc: Denial of Service via iconv() function with specific character sets The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them. Package Name: glibc-minimal-langpack Installed Version: 2.34-231.el9_7.10 Fixed Version: References: access.redhat.com nvd.nist.gov packages.fedoraproject.org sourceware.org sourceware.org www.cve.org
MEDIUM	CVE-2026-4437: glibc: glibc: Incorrect DNS response parsing via crafted DNS server response Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer. Package Name: glibc-minimal-langpack Installed Version: 2.34-231.el9_7.10 Fixed Version: References: access.redhat.com nvd.nist.gov sourceware.org www.cve.org
LOW	CVE-2026-4438: glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification. Package Name: glibc Installed Version: 2.34-231.el9_7.10 Fixed Version: References: access.redhat.com nvd.nist.gov sourceware.org www.cve.org
LOW	CVE-2026-4438: glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification. Package Name: glibc-common Installed Version: 2.34-231.el9_7.10 Fixed Version: References: access.redhat.com nvd.nist.gov sourceware.org www.cve.org
LOW	CVE-2026-4438: glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification. Package Name: glibc-minimal-langpack Installed Version: 2.34-231.el9_7.10 Fixed Version: References: access.redhat.com nvd.nist.gov sourceware.org www.cve.org
LOW	CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. Package Name: libgcc Installed Version: 11.5.0-11.el9 Fixed Version: References: access.redhat.com gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org lists.fedoraproject.org nvd.nist.gov sourceware.org www.cve.org
LOW	CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry() NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry(). Package Name: ncurses-base Installed Version: 6.2-12.20210508.el9 Fixed Version: References: access.redhat.com lists.fedoraproject.org lists.fedoraproject.org lists.gnu.org lists.gnu.org nvd.nist.gov security.netapp.com ubuntu.com www.cve.org
LOW	CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry() NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry(). Package Name: ncurses-libs Installed Version: 6.2-12.20210508.el9 Fixed Version: References: access.redhat.com lists.fedoraproject.org lists.fedoraproject.org lists.gnu.org lists.gnu.org nvd.nist.gov security.netapp.com ubuntu.com www.cve.org
LOW	CVE-2022-41409: pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input. Package Name: pcre2 Installed Version: 10.40-6.el9 Fixed Version: References: access.redhat.com github.com github.com github.com nvd.nist.gov www.cve.org
LOW	CVE-2022-41409: pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input. Package Name: pcre2-syntax Installed Version: 10.40-6.el9 Fixed Version: References: access.redhat.com github.com github.com github.com nvd.nist.gov www.cve.org

Package statistics are no longer available on cloudsmith.io. Please visit our new web app to access this feature.

These instructions assume you have setup the repository first (or read it).

To pull ztunnel @ reference/tag sha256:f28945ceefe0c64cfb1a2ceaa0bb2b9bb705f6c723e8a3dc737fc787ffb065b2:

docker pull containers.istio.tetratelabs.com/ztunnel@sha256:f28945ceefe0c64cfb1a2ceaa0bb2b9bb705f6c723e8a3dc737fc787ffb065b2

You can also pull the latest version of this image (if it exists):

docker pull containers.istio.tetratelabs.com/ztunnel:latest

To refer to this image after pulling in a Dockerfile, specify the following:

FROM containers.istio.tetratelabs.com/ztunnel@sha256:f28945ceefe0c64cfb1a2ceaa0bb2b9bb705f6c723e8a3dc737fc787ffb065b2

Still stuck? Need help? Don't panic. Just contact us for help (even if you're not a customer).

Previous Version: 247ea7ce653c6e0c2ee…

Next Version: f4dd928d50a0ea2d593…

ztunnel f28945ceefe0c64cfb1a2ceaa0b…

One-liner (summary)

Description

License

Size

Downloads

Tags

Last scanned

Scan result

Vulnerability count

Max. severity

CVE-2026-4878: libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

CVE-2025-5278: coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

CVE-2026-4046: glibc: glibc: Denial of Service via iconv() function with specific character sets

CVE-2026-4437: glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

CVE-2026-4046: glibc: glibc: Denial of Service via iconv() function with specific character sets

CVE-2026-4437: glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

CVE-2026-4046: glibc: glibc: Denial of Service via iconv() function with specific character sets

CVE-2026-4437: glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

CVE-2026-4438: glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

CVE-2026-4438: glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

CVE-2026-4438: glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry()

CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry()

CVE-2022-41409: pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

CVE-2022-41409: pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop