Pulsar 4.0

hardened latest

Full version: 4.0 Analyzed: 2026-02-10

Size Reduction -154% 455.8 MB to 1158.6 MB (-702.9 MB saved)

Component Reduction 2% 547 to 534 packages (13 removed)

Vulnerability Reduction 0% 0 to 29 vulnerabilities (-29 eliminated)

Image Comparison

Property	upstream	hardened
Image	docker.io/apachepulsar/pulsar:4.0.2	ghcr.io/armorred/pulsar:4.0-hardened
Size	455.8 MB	1158.6 MB
Layers	11	100
Components	547	534
Vulnerabilities	0	29
Runtime User	10000	10000

Vulnerability Analysis

upstream 0 total

hardened 29 total

8high

18medium

1low

Hardened vulnerability details (29)

CVE ID	Severity	Package	Version	Fixed In
GHSA-vx9q-rhv9-3jvg	high	io.airlift:aircompressor	0.27	3.4
GHSA-4cx2-fc23-5wg6	medium	org.bouncycastle:bcpkix-jdk18on	1.78.1	1.79
OSV-2023-298	high	cairo	1.18.2	04656d7450e229622546fd2b11496aa58c44181d
GHSA-pvp8-3xj6-8c6x	low	commons-configuration:commons-configuration	1.10	unfixed
GHSA-j288-q9x7-2f5v	medium	commons-lang:commons-lang	2.6	3.18.0
GHSA-j288-q9x7-2f5v	medium	org.apache.commons:commons-lang3	3.11	3.18.0
OSV-2023-1398	medium	file	5.45	81a0cbd10c347496bdee7dde78f7e47a16b4e79f
OSV-2023-505	high	file	5.45	1fc9175166fc5c5117838a1dcfb309b7c595eb56
OSV-2023-137	medium	harfbuzz	10.0.1	08784baf101aea472c133dcd67604b475ace3772
GHSA-qh8g-58pp-2wxh	medium	org.eclipse.jetty:jetty-http	9.4.56.v20240826	12.0.12
GHSA-q4rv-gq96-w7c5	high	org.eclipse.jetty:jetty-server	9.4.56.v20240826	9.4.57.v20241219
GHSA-3677-xxcr-wjqv	high	org.bitbucket.b_c:jose4j	0.9.4	0.9.6
OSV-2023-1307	medium	libbpf	1.4.7	unfixed
OSV-2023-877	medium	libbpf	1.4.7	unfixed
OSV-2024-395	medium	libpcap	1.10.5	unfixed
OSV-2024-817	medium	libpcap	1.10.5	3cbf9ed34a0e040d53bfdb01f81870a61ad41ec6
OSV-2021-777	high	libxml2	2.13.8	unfixed
GHSA-vc5p-v9hr-52mj	medium	org.apache.logging.log4j:log4j-core	2.23.1	2.25.3
GHSA-3p8m-j85q-pgmj	medium	io.netty:netty-codec	4.1.116.Final	4.2.5.Final
GHSA-84h7-rjj3-6jx4	medium	io.netty:netty-codec-http	4.1.116.Final	4.2.8.Final
GHSA-fghv-69vj-qj49	unknown	io.netty:netty-codec-http	4.1.116.Final	4.1.125.Final
GHSA-prj3-ccx8-p6x4	high	io.netty:netty-codec-http2	4.1.116.Final	4.2.4.Final
GHSA-389x-839f-4rhx	medium	io.netty:netty-common	4.1.116.Final	4.1.118.Final
GHSA-4g8c-wm8x-jfhw	high	io.netty:netty-handler	4.1.116.Final	4.1.118.Final
OSV-2023-197	unknown	p11-kit	0.25.5	unfixed
GHSA-cphf-4846-3xx9	medium	io.vertx:vertx-core	4.5.10	4.5.24
GHSA-45p5-v273-3qqr	medium	io.vertx:vertx-web	4.5.10	4.5.22
GHSA-h5fg-jpgr-rv9c	medium	io.vertx:vertx-web	4.5.10	4.5.22
GHSA-2hmj-97jw-28jh	medium	org.apache.zookeeper:zookeeper	3.9.3	3.9.4

Software Bill of Materials

upstream components (547)

HdrHistogram 2.1.9
abseil-cpp-base 20230802.1-r0
abseil-cpp-city 20230802.1-r0
abseil-cpp-cord 20230802.1-r0
abseil-cpp-cord-internal 20230802.1-r0
abseil-cpp-cordz-functions 20230802.1-r0
abseil-cpp-cordz-handle 20230802.1-r0
abseil-cpp-cordz-info 20230802.1-r0
abseil-cpp-crc-cord-state 20230802.1-r0
abseil-cpp-crc-internal 20230802.1-r0
abseil-cpp-crc32c 20230802.1-r0
abseil-cpp-debugging-internal 20230802.1-r0
abseil-cpp-exponential-biased 20230802.1-r0
abseil-cpp-flags-commandlineflag 20230802.1-r0
abseil-cpp-flags-commandlineflag-internal 20230802.1-r0
abseil-cpp-flags-config 20230802.1-r0
abseil-cpp-flags-internal 20230802.1-r0
abseil-cpp-flags-marshalling 20230802.1-r0
abseil-cpp-flags-parse 20230802.1-r0
abseil-cpp-flags-private-handle-accessor 20230802.1-r0
abseil-cpp-flags-program-name 20230802.1-r0
abseil-cpp-flags-reflection 20230802.1-r0
abseil-cpp-flags-usage 20230802.1-r0
abseil-cpp-flags-usage-internal 20230802.1-r0
abseil-cpp-hash 20230802.1-r0
abseil-cpp-hash-generator-testing 20230802.1-r0
abseil-cpp-int128 20230802.1-r0
abseil-cpp-kernel-timeout-internal 20230802.1-r0
abseil-cpp-log-globals 20230802.1-r0
abseil-cpp-log-internal-globals 20230802.1-r0
abseil-cpp-log-internal-log-sink-set 20230802.1-r0
abseil-cpp-log-severity 20230802.1-r0
abseil-cpp-log-sink 20230802.1-r0
abseil-cpp-low-level-hash 20230802.1-r0
abseil-cpp-malloc-internal 20230802.1-r0
abseil-cpp-per-thread-sem-test-common 20230802.1-r0
abseil-cpp-random-internal-distribution-test-util 20230802.1-r0
abseil-cpp-random-internal-platform 20230802.1-r0
abseil-cpp-random-internal-pool-urbg 20230802.1-r0
abseil-cpp-random-internal-randen 20230802.1-r0
abseil-cpp-random-internal-randen-hwaes 20230802.1-r0
abseil-cpp-random-internal-randen-hwaes-impl 20230802.1-r0
abseil-cpp-random-internal-randen-slow 20230802.1-r0
abseil-cpp-random-internal-seed-material 20230802.1-r0
abseil-cpp-random-seed-gen-exception 20230802.1-r0
abseil-cpp-raw-hash-set 20230802.1-r0
abseil-cpp-raw-logging-internal 20230802.1-r0
abseil-cpp-scoped-mock-log 20230802.1-r0
abseil-cpp-spinlock-wait 20230802.1-r0
abseil-cpp-stacktrace 20230802.1-r0
abseil-cpp-status 20230802.1-r0
abseil-cpp-statusor 20230802.1-r0
abseil-cpp-str-format-internal 20230802.1-r0
abseil-cpp-strerror 20230802.1-r0
abseil-cpp-strings 20230802.1-r0
abseil-cpp-strings-internal 20230802.1-r0
abseil-cpp-synchronization 20230802.1-r0
abseil-cpp-throw-delegate 20230802.1-r0
abseil-cpp-time 20230802.1-r0
abseil-cpp-time-zone 20230802.1-r0
aircompressor 0.27
alpine-baselayout 3.6.5-r0
alpine-baselayout-data 3.6.5-r0
alpine-keys 2.4-r1
annotations 13.0
aopalliance-repackaged 2.6.1
apache-bookkeeper-client 4.17.1
api-examples 4.0.2
apk-tools 2.14.4-r1
async-http-client 2.12.4
async-http-client-netty-utils 2.12.4
audience-annotations 0.12.0
auth0-java-jwt 4.3.0
auth0-jwks-rsa 0.22.0
auto-value-annotations 1.10.1
avro 1.11.4
avro 1.11.4
avro-protobuf 1.11.4
bash 5.2.26-r0
bcpkix-jdk18on 1.78.1
bcprov-jdk18on 1.78.1
bcutil-jdk18on 1.78.1
beust-jcommander 1.82
bind-libs 9.18.32-r0
bind-tools 9.18.32-r0
bookkeeper-circe-checksum 4.17.1
bookkeeper-common 4.17.1
bookkeeper-common-allocator 4.17.1
bookkeeper-cpu-affinity 4.17.1
bookkeeper-native-io 4.17.1
bookkeeper-proto 4.17.1
bookkeeper-server 4.17.1
bookkeeper-slogger-api 4.17.1
bookkeeper-slogger-slf4j 4.17.1
bookkeeper-stats-api 4.17.1
bookkeeper-tools-framework 4.17.1
bouncy-castle-bc 4.0.2
bouncycastle-bcpkix-jdk18on 1.78.1
bouncycastle-bcprov-jdk18on 1.78.1
bouncycastle-bcutil-jdk18on 1.78.1
brotli-libs 1.1.0-r2
busybox 1.36.1-r29
busybox-binsh 1.36.1-r29
byte-buddy 1.14.12
c-ares 1.33.1-r0
ca-certificates 20241121-r1
ca-certificates-bundle 20241121-r1
caffeine-caffeine 2.9.1
carrotsearch-hppc 0.9.1
certifi 2024.12.14
checkerframework-checker-qual 3.33.0
client-java 18.0.0
client-java-api 18.0.0
client-java-proto 18.0.0
codahale-metrics-provider 4.17.1
collector 0.16.1
commons-cli 1.5.0
commons-codec 1.15
commons-collections4 4.4
commons-compress 1.26.0
commons-compress 1.26.0
commons-configuration 1.10
commons-io 2.18.0
commons-io 2.18.0
commons-lang 2.6
commons-lang3 3.11
commons-lang3 3.11
commons-logging 1.1.1
commons-text 1.10.0
completable-futures 0.3.6
conscrypt-conscrypt-openjdk-uber 2.5.2
coreutils 9.5-r2
coreutils-env 9.5-r2
coreutils-fmt 9.5-r2
coreutils-sha512sum 9.5-r2
curator-client 5.7.1
curator-framework 5.7.1
curator-recipes 5.7.1
curl 8.11.1-r0
distributedlog-common 4.17.1
distributedlog-core 4.17.1
distributedlog-core 4.17.1
distributedlog-protocol 4.17.1
dsi-fastutil 8.5.14
error_prone_annotations 2.24.0
error_prone_annotations 2.24.0
failsafe 3.3.2
failureaccess 1.0.1
failureaccess 1.0.1
failureaccess 1.0.1
fastavro 1.10.0
fstrm 0.6.1-r4
gcompat 1.1.0-r4
gdbm 1.23-r1
gmock 1.14.0-r2
gmp 6.3.0-r1
google-auth-library-credentials 1.4.0
google-auth-library-oauth2-http 1.4.0
google-http-client 1.41.0
google-http-client-gson 1.41.0
google-re2 1.1.20240501
grpc-grpc-all 1.56.1
grpc-grpc-alts 1.56.1
grpc-grpc-api 1.56.1
grpc-grpc-auth 1.56.1
grpc-grpc-context 1.56.1
grpc-grpc-core 1.56.1
grpc-grpc-grpclb 1.56.1
grpc-grpc-netty-shaded 1.56.1
grpc-grpc-protobuf 1.56.1
grpc-grpc-protobuf-lite 1.56.1
grpc-grpc-rls 1.56.1
grpc-grpc-services 1.56.1
grpc-grpc-servlet 1.56.1
grpc-grpc-servlet-jakarta 1.56.1
grpc-grpc-stub 1.56.1
grpc-grpc-util 1.60.0
grpc-grpc-xds 1.56.1
grpcio 1.62.1
gson 2.8.9
gson 2.8.9
gson-fire 1.8.5
gtest 1.14.0-r2
guava 32.1.2-jre
guava 32.1.2-jre
hk2-api 2.6.1
hk2-locator 2.6.1
hk2-utils 2.6.1
http-server 4.17.1
httpclient 4.5.13
httpcore 4.4.15
icu-data-en 74.2-r0
icu-libs 74.2-r0
instrumentation-opentelemetry-instrumentation-api 1.33.6
instrumentation-opentelemetry-instrumentation-api-semconv 1.33.6-alpha
instrumentation-opentelemetry-resources 1.33.6-alpha
instrumentation-opentelemetry-runtime-telemetry-java17 1.33.6-alpha
instrumentation-opentelemetry-runtime-telemetry-java8 1.33.6-alpha
j2objc-annotations 1.3
j2objc-annotations 1.3
jackson-annotations 2.17.2
jackson-annotations 2.17.2
jackson-core 2.17.2
jackson-core 2.17.2
jackson-databind 2.17.2
jackson-databind 2.17.2
jackson-dataformat-yaml 2.17.2
jackson-datatype-jdk8 2.17.2
jackson-datatype-jsr310 2.17.2
jackson-jaxrs-base 2.17.2
jackson-jaxrs-json-provider 2.17.2
jackson-module-jaxb-annotations 2.17.2
jackson-module-jsonSchema 2.17.2
jackson-module-parameter-names 2.17.2
jakarta.activation 1.2.2
jakarta.activation-api 1.2.2
jakarta.annotation-api 1.3.5
jakarta.inject 2.6.1
jakarta.validation-api 2.0.2
jakarta.ws.rs-api 2.1.6
jakarta.xml.bind-api 2.3.3
java-instance UNKNOWN
java-semver 0.9.0
javassist 3.25.0-GA
javax-websocket-client-impl 9.4.56.v20240826
javax.servlet-api 3.1.0
javax.websocket-client-api 1.0
jcip-jcip-annotations 1.0
jcl-over-slf4j 2.0.13
jctools-core 2.1.2
jctools-core 4.0.5
jctools-core 4.0.5
jersey-client 2.42
jersey-common 2.42
jersey-container-servlet 2.42
jersey-container-servlet-core 2.42
jersey-entity-filtering 2.42
jersey-hk2 2.42
jersey-media-json-jackson 2.42
jersey-media-multipart 2.42
jersey-server 2.42
jetty-alpn-conscrypt-server 9.4.56.v20240826
jetty-alpn-server 9.4.56.v20240826
jetty-client 9.4.56.v20240826
jetty-continuation 9.4.56.v20240826
jetty-http 9.4.56.v20240826
jetty-io 9.4.56.v20240826
jetty-proxy 9.4.56.v20240826
jetty-security 9.4.56.v20240826
jetty-server 9.4.56.v20240826
jetty-servlet 9.4.56.v20240826
jetty-servlets 9.4.56.v20240826
jetty-util 9.4.56.v20240826
jetty-util-ajax 9.4.56.v20240826
jjwt-api 0.11.1
jjwt-impl 0.11.1
jjwt-jackson 0.11.1
jline 2.14.6
jline 3.21.0
jline-builtins 3.21.0
jline-reader 3.21.0
jline-remote-ssh 3.21.0
jline-remote-telnet 3.21.0
jline-style 3.21.0
jline-terminal 3.21.0
jline-terminal-jansi 3.21.0
jline-terminal-jna 3.21.0
jna-jna-jpms 5.12.1
jna-jna-platform-jpms 5.12.1
jose4j 0.9.4
jrt-fs 21.0.5
json-c 0.17-r0
jsr305 3.0.2
jsr305 3.0.2
kazoo 2.10.0
keyutils-libs 1.6.3-r3
kotlin-kotlin-stdlib 1.8.20
kotlin-kotlin-stdlib-common 1.8.20
kotlin-kotlin-stdlib-jdk7 1.8.20
kotlin-kotlin-stdlib-jdk8 1.8.20
krb5-conf 1.0-r2
krb5-libs 1.21.3-r0
libacl 2.3.2-r0
libattr 2.5.2-r0
libbz2 1.0.8-r6
libcom_err 1.47.0-r5
libcrypto3 3.3.2-r1
libcurl 8.11.1-r0
libexpat 2.6.4-r0
libffi 3.4.6-r0
libgcc 13.2.1_git20240309-r0
libidn2 2.3.7-r0
libintl 0.22.5-r0
libncursesw 6.4_p20240420-r2
libpanelw 6.4_p20240420-r2
libproc2 4.0.4-r0
libpsl 0.21.5-r1
libssl3 3.3.2-r1
libstdc++ 13.2.1_git20240309-r0
libucontext 1.2-r3
libunistring 1.2-r0
libuuid 2.40.1-r1
libuv 1.48.0-r0
libverto 0.3.2-r2
libxml2 2.12.7-r0
listenablefuture 1.0
listenablefuture 9999.0-empty-to-avoid-conflict-with-guava
listenablefuture 9999.0-empty-to-avoid-conflict-with-guava
log4j-api 2.23.1
log4j-api 2.23.1
log4j-core 2.23.1
log4j-core 2.23.1
log4j-slf4j2-impl 2.23.1
log4j-slf4j2-impl 2.23.1
log4j-web 2.23.1
managed-ledger 4.0.2
memory 0.8.3
metrics-core 4.1.12.1
metrics-graphite 4.1.12.1
metrics-jmx 4.1.12.1
metrics-jvm 4.1.12.1
mimepull 1.9.15
mpdecimal 4.0.0-r0
musl 1.2.5-r0
musl-obstack 1.2.3-r2
musl-utils 1.2.5-r0
ncurses-terminfo-base 6.4_p20240420-r2
netty-buffer 4.1.116.Final
netty-codec 4.1.116.Final
netty-codec-dns 4.1.116.Final
netty-codec-haproxy 4.1.116.Final
netty-codec-http 4.1.116.Final
netty-codec-http2 4.1.116.Final
netty-codec-socks 4.1.116.Final
netty-common 4.1.116.Final
netty-handler 4.1.116.Final
netty-handler-proxy 4.1.116.Final
netty-incubator-transport-classes-io_uring 0.0.26.Final
netty-incubator-transport-native-io_uring 0.0.26.Final
netty-incubator-transport-native-io_uring 0.0.26.Final
netty-reactive-streams 2.0.6
netty-resolver 4.1.116.Final
netty-resolver-dns 4.1.116.Final
netty-resolver-dns-classes-macos 4.1.116.Final
netty-resolver-dns-native-macos 4.1.116.Final
netty-resolver-dns-native-macos 4.1.116.Final
netty-tcnative-boringssl-static 2.0.69.Final
netty-tcnative-boringssl-static 2.0.69.Final
netty-tcnative-classes 2.0.69.Final
netty-transport 4.1.116.Final
netty-transport-classes-epoll 4.1.116.Final
netty-transport-native-epoll 4.1.116.Final
netty-transport-native-epoll 4.1.116.Final
netty-transport-native-unix-common 4.1.116.Final
nghttp2-libs 1.62.1-r0
okhttp3-logging-interceptor 4.9.3
okhttp3-okhttp 4.9.3
okio-okio 3.4.0
okio-okio-jvm 3.4.0
opencensus-opencensus-api 0.28.0
opencensus-opencensus-contrib-http-util 0.28.0
opencensus-opencensus-proto 0.2.0
openssl 3.3.2-r1
opentelemetry-opentelemetry-api 1.45.0
opentelemetry-opentelemetry-api-incubator 1.45.0-alpha
opentelemetry-opentelemetry-context 1.45.0
opentelemetry-opentelemetry-exporter-common 1.45.0
opentelemetry-opentelemetry-exporter-otlp 1.45.0
opentelemetry-opentelemetry-exporter-otlp-common 1.45.0
opentelemetry-opentelemetry-exporter-prometheus 1.45.0-alpha
opentelemetry-opentelemetry-exporter-sender-okhttp 1.45.0
opentelemetry-opentelemetry-sdk 1.45.0
opentelemetry-opentelemetry-sdk-common 1.45.0
opentelemetry-opentelemetry-sdk-extension-autoconfigure 1.45.0
opentelemetry-opentelemetry-sdk-extension-autoconfigure-spi 1.45.0
opentelemetry-opentelemetry-sdk-logs 1.45.0
opentelemetry-opentelemetry-sdk-metrics 1.45.0
opentelemetry-opentelemetry-sdk-trace 1.45.0
osgi-resource-locator 1.0.3
oshi-core-java11 6.4.0
oxia-client 0.4.10
oxia-client-api 0.4.10
packaging 24.0
perfmark-perfmark-api 0.26.0
picocli-picocli 4.7.5
picocli-picocli-shell-jline3 4.7.5
pip 24.0
procps-ng 4.0.4-r0
prometheus-client 0.21.1
prometheus-metrics-config 1.3.4
prometheus-metrics-exporter-common 1.3.4
prometheus-metrics-exporter-httpserver 1.3.4
prometheus-metrics-exposition-formats 1.3.4
prometheus-metrics-exposition-textformats 1.3.4
prometheus-metrics-model 1.3.4
prometheus-metrics-provider 4.17.1
proto-google-common-protos 2.17.0
protobuf 3.20.3
protobuf-c 1.5.0-r0
protobuf-protobuf-java 3.25.5
protobuf-protobuf-java-util 3.25.5
pulsar-broker 4.0.2
pulsar-broker-auth-oidc 4.0.2
pulsar-broker-auth-sasl 4.0.2
pulsar-broker-common 4.0.2
pulsar-cli-utils 4.0.2
pulsar-client 3.5.0
pulsar-client-admin-api 4.0.2
pulsar-client-admin-api 4.0.2
pulsar-client-admin-original 4.0.2
pulsar-client-api 4.0.2
pulsar-client-api 4.0.2
pulsar-client-auth-sasl 4.0.2
pulsar-client-messagecrypto-bc 4.0.2
pulsar-client-original 4.0.2
pulsar-client-tools 4.0.2
pulsar-client-tools-api 4.0.2
pulsar-common 4.0.2
pulsar-config-validation 4.0.2
pulsar-docs-tools 4.0.2
pulsar-functions-api 4.0.2
pulsar-functions-api 4.0.2
pulsar-functions-api-examples 4.0.2
pulsar-functions-instance 4.0.2
pulsar-functions-local-runner-original 4.0.2
pulsar-functions-proto 4.0.2
pulsar-functions-runtime 4.0.2
pulsar-functions-secrets 4.0.2
pulsar-functions-utils 4.0.2
pulsar-functions-worker 4.0.2
pulsar-io-core 4.0.2
pulsar-io-core 4.0.2
pulsar-jetcd-core-shaded 4.0.2
pulsar-metadata 4.0.2
pulsar-opentelemetry 4.0.2
pulsar-package-bookkeeper-storage 4.0.2
pulsar-package-core 4.0.2
pulsar-package-filesystem-storage 4.0.2
pulsar-proxy 4.0.2
pulsar-testclient 4.0.2
pulsar-transaction-common 4.0.2
pulsar-transaction-coordinator 4.0.2
pulsar-websocket 4.0.2
py3-grpcio 1.62.1-r0
py3-grpcio-pyc 1.62.1-r0
py3-packaging 24.0-r1
py3-packaging-pyc 24.0-r1
py3-parsing 3.1.2-r1
py3-parsing-pyc 3.1.2-r1
py3-pip 24.0-r2
py3-pip-pyc 24.0-r2
py3-pybind11 2.12.0-r1
py3-pybind11-pyc 2.12.0-r1
py3-re2 2024.05.01-r0
py3-re2-pyc 2024.05.01-r0
py3-setuptools 70.3.0-r0
py3-setuptools-pyc 70.3.0-r0
py3-six 1.16.0-r9
py3-six-pyc 1.16.0-r9
py3-yaml 6.0.1-r3
py3-yaml-pyc 6.0.1-r3
pybind11 2.12.0
pyc 3.12.8-r1
pymmh3 0.0.5
pyparsing 3.1.2
python3 3.12.8-r1
python3-pyc 3.12.8-r1
python3-pycache-pyc0 3.12.8-r1
pytz 2024.2
pyyaml 6.0.1
ratelimit 2.2.1
re2 2024.05.01-r0
re2j-re2j 1.7
reactivestreams-reactive-streams 1.0.3
readline 8.2.10-r0
roaringbitmap-RoaringBitmap 1.2.0
rocksdb-rocksdbjni 7.9.2
rxjava3-rxjava 3.0.1
scanelf 1.3.7-r2
seancfoley-ipaddress 5.5.0
semconv-opentelemetry-semconv 1.29.0-alpha
setuptools 70.3.0
simpleclient 0.16.0
simpleclient_caffeine 0.16.0
simpleclient_common 0.16.0
simpleclient_hotspot 0.16.0
simpleclient_httpserver 0.16.0
simpleclient_jetty 0.16.0
simpleclient_log4j2 0.16.0
simpleclient_servlet 0.16.0
simpleclient_servlet_common 0.16.0
simpleclient_tracer_common 0.16.0
simpleclient_tracer_otel 0.16.0
simpleclient_tracer_otel_agent 0.16.0
six 1.16.0
skalibs 2.14.1.1-r0
sketches-core 0.8.3
slf4j-api 2.0.13
slf4j-api 2.0.13
snakeyaml 2.0
snappy-snappy-java 1.1.10.5
sqlite-libs 3.45.3-r1
ssl_client 1.36.1-r29
statelib 4.17.1
stream-storage-api 4.17.1
stream-storage-api 4.17.1
stream-storage-common 4.17.1
stream-storage-common 4.17.1
stream-storage-java-client 4.17.1
stream-storage-java-client-base 4.17.1
stream-storage-java-client-base 4.17.1
stream-storage-java-kv-client 4.17.1
stream-storage-proto 4.17.1
stream-storage-proto 4.17.1
stream-storage-server 4.17.1
stream-storage-service-api 4.17.1
stream-storage-service-impl 4.17.1
swagger-annotations 1.6.2
swagger-core 1.6.2
swagger-models 1.6.2
testmocks 4.0.2
thrift-libthrift 0.14.2
typetools 0.5.0
utmps-libs 0.1.2.2-r1
validation-api 1.1.0.Final
vertx-auth-common 4.5.10
vertx-bridge-common 4.5.10
vertx-core 4.5.10
vertx-core 4.5.10
vertx-grpc 4.5.10
vertx-http-server 4.17.1
vertx-web 4.5.10
vertx-web-common 4.5.10
websocket-api 9.4.56.v20240826
websocket-client 9.4.56.v20240826
websocket-common 9.4.56.v20240826
websocket-server 9.4.56.v20240826
websocket-servlet 9.4.56.v20240826
xz-libs 5.6.2-r0
yaml 0.2.5-r2
zero-allocation-hashing 0.16
zeroturnaround-zt-zip 1.17
zlib 1.3.1-r1
zookeeper 3.9.3
zookeeper-jute 3.9.3
zookeeper-prometheus-metrics 3.9.3
zstd-libs 1.5.6-r0

hardened components (534)

HdrHistogram 2.1.9
acl 2.3.2
aircompressor 0.27
alsa-lib 1.2.12
alsa-topology-conf 1.2.5.1
alsa-ucm-conf 1.2.12
annotations 13.0
aopalliance-repackaged 2.6.1
apache-pulsar 4.0.2
api-examples 4.0.2
async-http-client 2.12.4
async-http-client-netty-utils 2.12.4
at-spi2-core 2.54.1
attr 2.5.2
audience-annotations 0.12.0
audit 4.0
auth0-java-jwt 4.3.0
auth0-jwks-rsa 0.22.0
auto-value-annotations 1.10.1
avahi 0.8
avro 1.11.4
avro 1.11.4
avro-protobuf 1.11.4
bash 5.2p37
bash-interactive 5.2p37
bcpkix-jdk18on 1.78.1
bcprov-jdk18on 1.78.1
bcutil-jdk18on 1.78.1
beust-jcommander 1.82
bookkeeper-circe-checksum 4.17.1
bookkeeper-common 4.17.1
bookkeeper-common-allocator 4.17.1
bookkeeper-cpu-affinity 4.17.1
bookkeeper-native-io 4.17.1
bookkeeper-proto 4.17.1
bookkeeper-server 4.17.1
bookkeeper-slogger-api 4.17.1
bookkeeper-slogger-slf4j 4.17.1
bookkeeper-stats-api 4.17.1
bookkeeper-tools-framework 4.17.1
bouncy-castle-bc 4.0.2
bouncycastle-bcpkix-jdk18on 1.78.1
bouncycastle-bcprov-jdk18on 1.78.1
bouncycastle-bcutil-jdk18on 1.78.1
brotli 1.1.0
byte-buddy 1.14.12
bzip2 1.0.8
bzip2 1.0.8
caffeine-caffeine 2.9.1
cairo 1.18.2
carrotsearch-hppc 0.9.1
checkerframework-checker-qual 3.33.0
client-java 18.0.0
client-java-api 18.0.0
client-java-proto 18.0.0
codahale-metrics-provider 4.17.1
collector 0.16.1
commons-cli 1.5.0
commons-codec 1.15
commons-collections4 4.4
commons-compress 1.26.0
commons-compress 1.26.0
commons-configuration 1.10
commons-io 2.18.0
commons-io 2.18.0
commons-lang 2.6
commons-lang3 3.11
commons-lang3 3.11
commons-logging 1.1.1
commons-text 1.10.0
completable-futures 0.3.6
conscrypt-conscrypt-openjdk-uber 2.5.2
coreutils 9.5
cracklib 2.10.0
cryptsetup 2.7.5
cups 2.4.11
curator-client 5.7.1
curator-framework 5.7.1
curator-recipes 5.7.1
curl 8.12.1
db 4.8.30
dbus 1.14.10
dconf 0.40.0
dejavu-fonts-minimal 2.37
distributedlog-common 4.17.1
distributedlog-core 4.17.1
distributedlog-core 4.17.1
distributedlog-protocol 4.17.1
dns-root-data 2024-06-20
dsi-fastutil 8.5.14
elfutils 0.191
error_prone_annotations 2.24.0
error_prone_annotations 2.24.0
expat 2.7.1
failsafe 3.3.2
failureaccess 1.0.1
failureaccess 1.0.1
failureaccess 1.0.1
file 5.45
fontconfig 2.15.0
fontconfig 2.15.0
freetype 2.13.3
fribidi 1.0.16
gcc 13.3.0
gcc 13.3.0
gdk-pixbuf 2.42.12
getent-glibc 2.40-66
giflib 5.2.2
glib 2.82.1
glibc 2.40-66
glibc 2.40-66
gmp-with-cxx 6.3.0
gmp-with-cxx 6.3.0
gnugrep 3.11
gnupg 2.4.5
gnutar 1.35
gnutls 3.8.6
gobject-introspection 1.82.0
google-auth-library-credentials 1.4.0
google-auth-library-oauth2-http 1.4.0
google-http-client 1.41.0
google-http-client-gson 1.41.0
graphite2 1.3.14
grpc-grpc-all 1.56.1
grpc-grpc-alts 1.56.1
grpc-grpc-api 1.56.1
grpc-grpc-auth 1.56.1
grpc-grpc-context 1.56.1
grpc-grpc-core 1.56.1
grpc-grpc-grpclb 1.56.1
grpc-grpc-netty-shaded 1.56.1
grpc-grpc-protobuf 1.56.1
grpc-grpc-protobuf-lite 1.56.1
grpc-grpc-rls 1.56.1
grpc-grpc-services 1.56.1
grpc-grpc-servlet 1.56.1
grpc-grpc-servlet-jakarta 1.56.1
grpc-grpc-stub 1.56.1
grpc-grpc-util 1.60.0
grpc-grpc-xds 1.56.1
gsettings-desktop-schemas 47.1
gson 2.8.9
gson 2.8.9
gson-fire 1.8.5
gtk+3 3.24.43
guava 32.1.2-jre
guava 32.1.2-jre
gzip 1.13
harfbuzz 10.0.1
hk2-api 2.6.1
hk2-locator 2.6.1
hk2-utils 2.6.1
http-server 4.17.1
httpclient 4.5.13
httpcore 4.4.15
icu4c 74.2
instrumentation-opentelemetry-instrumentation-api 1.33.6
instrumentation-opentelemetry-instrumentation-api-semconv 1.33.6-alpha
instrumentation-opentelemetry-resources 1.33.6-alpha
instrumentation-opentelemetry-runtime-telemetry-java17 1.33.6-alpha
instrumentation-opentelemetry-runtime-telemetry-java8 1.33.6-alpha
iptables 1.8.10
iso-codes 4.17.0
j2objc-annotations 1.3
j2objc-annotations 1.3
jackson-annotations 2.17.2
jackson-annotations 2.17.2
jackson-core 2.17.2
jackson-core 2.17.2
jackson-databind 2.17.2
jackson-databind 2.17.2
jackson-dataformat-yaml 2.17.2
jackson-datatype-jdk8 2.17.2
jackson-datatype-jsr310 2.17.2
jackson-jaxrs-base 2.17.2
jackson-jaxrs-json-provider 2.17.2
jackson-module-jaxb-annotations 2.17.2
jackson-module-jsonSchema 2.17.2
jackson-module-parameter-names 2.17.2
jakarta.activation 1.2.2
jakarta.activation-api 1.2.2
jakarta.annotation-api 1.3.5
jakarta.inject 2.6.1
jakarta.validation-api 2.0.2
jakarta.ws.rs-api 2.1.6
jakarta.xml.bind-api 2.3.3
java-instance UNKNOWN
java-semver 0.9.0
javassist 3.25.0-GA
javax-websocket-client-impl 9.4.56.v20240826
javax.servlet-api 3.1.0
javax.websocket-client-api 1.0
jcip-jcip-annotations 1.0
jcl-over-slf4j 2.0.13
jctools-core 2.1.2
jctools-core 4.0.5
jctools-core 4.0.5
jersey-client 2.42
jersey-common 2.42
jersey-container-servlet 2.42
jersey-container-servlet-core 2.42
jersey-entity-filtering 2.42
jersey-hk2 2.42
jersey-media-json-jackson 2.42
jersey-media-multipart 2.42
jersey-server 2.42
jetty-alpn-conscrypt-server 9.4.56.v20240826
jetty-alpn-server 9.4.56.v20240826
jetty-client 9.4.56.v20240826
jetty-continuation 9.4.56.v20240826
jetty-http 9.4.56.v20240826
jetty-io 9.4.56.v20240826
jetty-proxy 9.4.56.v20240826
jetty-security 9.4.56.v20240826
jetty-server 9.4.56.v20240826
jetty-servlet 9.4.56.v20240826
jetty-servlets 9.4.56.v20240826
jetty-util 9.4.56.v20240826
jetty-util-ajax 9.4.56.v20240826
jjwt-api 0.11.1
jjwt-impl 0.11.1
jjwt-jackson 0.11.1
jline 2.14.6
jline 3.21.0
jline-builtins 3.21.0
jline-reader 3.21.0
jline-remote-ssh 3.21.0
jline-remote-telnet 3.21.0
jline-style 3.21.0
jline-terminal 3.21.0
jline-terminal-jansi 3.21.0
jline-terminal-jna 3.21.0
jna-jna-jpms 5.12.1
jna-jna-platform-jpms 5.12.1
jose4j 0.9.4
jrt-fs 17.0.15
json-c 0.17
json-glib 1.10.0
jsr305 3.0.2
jsr305 3.0.2
kbd 2.6.4
kexec-tools 2.0.29
keyutils 1.6.3
kmod 31
kmod 31
kotlin-kotlin-stdlib 1.8.20
kotlin-kotlin-stdlib-common 1.8.20
kotlin-kotlin-stdlib-jdk7 1.8.20
kotlin-kotlin-stdlib-jdk8 1.8.20
krb5 1.21.3
lcms2 2.16
lerc 4.0.0
libX11 1.8.10
libXau 1.0.11
libXcomposite 0.4.6
libXcursor 1.2.2
libXdamage 1.1.6
libXdmcp 1.1.5
libXext 1.3.6
libXfixes 6.0.1
libXft 2.3.8
libXi 1.8.2
libXinerama 1.1.5
libXrandr 1.5.4
libXrender 0.9.11
libXtst 1.2.5
libapparmor 4.0.3
libarchive 3.7.8
libassuan 2.5.7
libbpf 1.4.7
libcap 2.70
libcbor 0.11.0
libdaemon 0.14
libdatrie 2019-12-20
libdeflate 1.22
libepoxy 1.5.10
libevent 2.1.12
libffi 3.4.6
libfido2 1.15.0
libgcrypt 1.10.3
libglvnd 1.7.0
libgpg-error 1.50
libidn2 2.3.7
libjpeg-turbo 3.0.4
libmicrohttpd 1.0.1
libmnl 1.0.5
libnetfilter_conntrack 1.1.0
libnfnetlink 1.0.2
libnftnl 1.2.8
libnl 3.10.0
libpcap 1.10.5
libpng-apng 1.6.43
libpsl 0.21.5
libpwquality 1.4.5
libseccomp 2.5.5
libselinux 3.7
libsoup 3.6.1
libssh2 1.11.1
libtasn1 4.20.0
libthai 0.1.29
libtiff 4.7.0
libunistring 1.2
libwebp 1.4.0
libxcb 1.17.0
libxcrypt 4.4.36
libxkbcommon 1.7.0
libxml2 2.13.8
linux-pam 1.6.1
listenablefuture 1.0
listenablefuture 9999.0-empty-to-avoid-conflict-with-guava
listenablefuture 9999.0-empty-to-avoid-conflict-with-guava
log4j-api 2.23.1
log4j-api 2.23.1
log4j-core 2.23.1
log4j-core 2.23.1
log4j-slf4j2-impl 2.23.1
log4j-slf4j2-impl 2.23.1
log4j-web 2.23.1
lvm2 2.03.31
lz4 1.10.0
managed-ledger 4.0.2
memory 0.8.3
metrics-core 4.1.12.1
metrics-graphite 4.1.12.1
metrics-jmx 4.1.12.1
metrics-jvm 4.1.12.1
mimepull 1.9.15
ncurses 6.4.20221231
nettle 3.10
netty-buffer 4.1.116.Final
netty-codec 4.1.116.Final
netty-codec-dns 4.1.116.Final
netty-codec-haproxy 4.1.116.Final
netty-codec-http 4.1.116.Final
netty-codec-http2 4.1.116.Final
netty-codec-socks 4.1.116.Final
netty-common 4.1.116.Final
netty-handler 4.1.116.Final
netty-handler-proxy 4.1.116.Final
netty-incubator-transport-classes-io_uring 0.0.26.Final
netty-incubator-transport-native-io_uring 0.0.26.Final
netty-incubator-transport-native-io_uring 0.0.26.Final
netty-reactive-streams 2.0.6
netty-resolver 4.1.116.Final
netty-resolver-dns 4.1.116.Final
netty-resolver-dns-classes-macos 4.1.116.Final
netty-resolver-dns-native-macos 4.1.116.Final
netty-resolver-dns-native-macos 4.1.116.Final
netty-tcnative-boringssl-static 2.0.69.Final
netty-tcnative-boringssl-static 2.0.69.Final
netty-tcnative-boringssl-static 2.0.69.Final
netty-tcnative-boringssl-static 2.0.69.Final
netty-tcnative-boringssl-static 2.0.69.Final
netty-tcnative-boringssl-static 2.0.69.Final
netty-tcnative-classes 2.0.69.Final
netty-transport 4.1.116.Final
netty-transport-classes-epoll 4.1.116.Final
netty-transport-native-epoll 4.1.116.Final
netty-transport-native-epoll 4.1.116.Final
netty-transport-native-unix-common 4.1.116.Final
nghttp2 1.64.0
npth 1.7
okhttp3-logging-interceptor 4.9.3
okhttp3-okhttp 4.9.3
okio-okio 3.4.0
okio-okio-jvm 3.4.0
opencensus-opencensus-api 0.28.0
opencensus-opencensus-contrib-http-util 0.28.0
opencensus-opencensus-proto 0.2.0
openjdk 17.0.15+6
openssl 3.3.3
opentelemetry-opentelemetry-api 1.45.0
opentelemetry-opentelemetry-api-incubator 1.45.0-alpha
opentelemetry-opentelemetry-context 1.45.0
opentelemetry-opentelemetry-exporter-common 1.45.0
opentelemetry-opentelemetry-exporter-otlp 1.45.0
opentelemetry-opentelemetry-exporter-otlp-common 1.45.0
opentelemetry-opentelemetry-exporter-prometheus 1.45.0-alpha
opentelemetry-opentelemetry-exporter-sender-okhttp 1.45.0
opentelemetry-opentelemetry-sdk 1.45.0
opentelemetry-opentelemetry-sdk-common 1.45.0
opentelemetry-opentelemetry-sdk-extension-autoconfigure 1.45.0
opentelemetry-opentelemetry-sdk-extension-autoconfigure-spi 1.45.0
opentelemetry-opentelemetry-sdk-logs 1.45.0
opentelemetry-opentelemetry-sdk-metrics 1.45.0
opentelemetry-opentelemetry-sdk-trace 1.45.0
osgi-resource-locator 1.0.3
oshi-core-java11 6.4.0
oxia-client 0.4.10
oxia-client-api 0.4.10
p11-kit 0.25.5
pango 1.54.0
pcre2 10.44
pcsclite 2.3.0
perfmark-perfmark-api 0.26.0
picocli-picocli 4.7.5
picocli-picocli-shell-jline3 4.7.5
pixman 0.43.4
prometheus-metrics-config 1.3.4
prometheus-metrics-exporter-common 1.3.4
prometheus-metrics-exporter-httpserver 1.3.4
prometheus-metrics-exposition-formats 1.3.4
prometheus-metrics-exposition-textformats 1.3.4
prometheus-metrics-model 1.3.4
prometheus-metrics-provider 4.17.1
proto-google-common-protos 2.17.0
protobuf-protobuf-java 3.25.5
protobuf-protobuf-java-util 3.25.5
publicsuffix-list-0 unstable-2024-10-25
pulsar-broker 4.0.2
pulsar-broker-auth-oidc 4.0.2
pulsar-broker-auth-sasl 4.0.2
pulsar-broker-common 4.0.2
pulsar-cli-utils 4.0.2
pulsar-client-admin-api 4.0.2
pulsar-client-admin-api 4.0.2
pulsar-client-admin-original 4.0.2
pulsar-client-api 4.0.2
pulsar-client-api 4.0.2
pulsar-client-auth-sasl 4.0.2
pulsar-client-messagecrypto-bc 4.0.2
pulsar-client-original 4.0.2
pulsar-client-tools 4.0.2
pulsar-client-tools-api 4.0.2
pulsar-common 4.0.2
pulsar-config-validation 4.0.2
pulsar-docs-tools 4.0.2
pulsar-functions-api 4.0.2
pulsar-functions-api 4.0.2
pulsar-functions-api-examples 4.0.2
pulsar-functions-instance 4.0.2
pulsar-functions-local-runner-original 4.0.2
pulsar-functions-proto 4.0.2
pulsar-functions-runtime 4.0.2
pulsar-functions-secrets 4.0.2
pulsar-functions-utils 4.0.2
pulsar-functions-worker 4.0.2
pulsar-io-core 4.0.2
pulsar-io-core 4.0.2
pulsar-jetcd-core-shaded 4.0.2
pulsar-metadata 4.0.2
pulsar-opentelemetry 4.0.2
pulsar-package-bookkeeper-storage 4.0.2
pulsar-package-core 4.0.2
pulsar-package-filesystem-storage 4.0.2
pulsar-proxy 4.0.2
pulsar-testclient 4.0.2
pulsar-transaction-common 4.0.2
pulsar-transaction-coordinator 4.0.2
pulsar-websocket 4.0.2
qrencode 4.1.1
re2j-re2j 1.7
reactivestreams-reactive-streams 1.0.3
readline 8.2p13
roaringbitmap-RoaringBitmap 1.2.0
rocksdb-rocksdbjni 7.9.2
rxjava3-rxjava 3.0.1
seancfoley-ipaddress 5.5.0
semconv-opentelemetry-semconv 1.29.0-alpha
simpleclient 0.16.0
simpleclient_caffeine 0.16.0
simpleclient_common 0.16.0
simpleclient_hotspot 0.16.0
simpleclient_httpserver 0.16.0
simpleclient_jetty 0.16.0
simpleclient_log4j2 0.16.0
simpleclient_servlet 0.16.0
simpleclient_servlet_common 0.16.0
simpleclient_tracer_common 0.16.0
simpleclient_tracer_otel 0.16.0
simpleclient_tracer_otel_agent 0.16.0
sketches-core 0.8.3
slf4j-api 2.0.13
slf4j-api 2.0.13
snakeyaml 2.0
snappy-snappy-java 1.1.10.5
sqlite 3.46.1
statelib 4.17.1
stream-storage-api 4.17.1
stream-storage-api 4.17.1
stream-storage-common 4.17.1
stream-storage-common 4.17.1
stream-storage-java-client 4.17.1
stream-storage-java-client-base 4.17.1
stream-storage-java-client-base 4.17.1
stream-storage-java-kv-client 4.17.1
stream-storage-proto 4.17.1
stream-storage-proto 4.17.1
stream-storage-server 4.17.1
stream-storage-service-api 4.17.1
stream-storage-service-impl 4.17.1
swagger-annotations 1.6.2
swagger-core 1.6.2
swagger-models 1.6.2
systemd 256.10
systemd-minimal 256.10
systemd-minimal-libs 256.10
testmocks 4.0.2
thrift-libthrift 0.14.2
tinysparql 3.8.1
tpm2-tss 4.1.3
typetools 0.5.0
unbound 1.22.0
util-linux-minimal 2.39.4
util-linux-minimal 2.39.4
util-linux-minimal 2.39.4
util-linux-minimal 2.39.4
validation-api 1.1.0.Final
vertx-auth-common 4.5.10
vertx-bridge-common 4.5.10
vertx-core 4.5.10
vertx-core 4.5.10
vertx-grpc 4.5.10
vertx-http-server 4.17.1
vertx-web 4.5.10
vertx-web-common 4.5.10
wayland 1.23.1
websocket-api 9.4.56.v20240826
websocket-client 9.4.56.v20240826
websocket-common 9.4.56.v20240826
websocket-server 9.4.56.v20240826
websocket-servlet 9.4.56.v20240826
xgcc 13.3.0
xkeyboard-config 2.43
xz 5.6.3
xz 5.6.3
zero-allocation-hashing 0.16
zeroturnaround-zt-zip 1.17
zlib 1.3.1
zookeeper 3.9.3
zookeeper-jute 3.9.3
zookeeper-prometheus-metrics 3.9.3
zstd 1.5.6
zstd 1.5.6

Download SBOMs

Upstream SBOM Hardened SBOM

Usage

$
podman pull ghcr.io/armorred/pulsar:4.0

Verify Signature

$
cosign verify --key https://armorred.org/cosign.pub ghcr.io/armorred/pulsar:4.0