ghcr.io/pair-ai-platform/go:runtime-poppler-26.11.0-20261110.34

Go static runtime with poppler-utils 26.11.0. Tags: runtime-poppler-26.11.0-20261110.34, runtime-poppler, poppler. Index digest sha256:59e2bf86805725608575628cd21d96abb19c03441409f5d21152e774dea930b3.

Vulnerabilities · SBOM · Hardening profile

Vulnerabilities

High: 2 (Grype)

IDSeverityPackageInstalledComes fromFixed upstream inArchitectures
CVE-2026-119586Highsqlite-libs3.54.1-r0sqlite-libs 3.54.1-r0no fix yetx86_64, aarch64
CVE-2026-84243Highglibc-2.442.44-r16glibc-2.44 2.44-r16no fix yetx86_64, aarch64

Comes from is the Wolfi package that brings the affected code into the image; a library bundled inside the toolchain, for example, comes from that package. Fixed upstream in is the version of the affected code that fixes it; the image gets the fix when the package it comes from ships that version, and the next build after that publishes it.

SBOM

One SPDX SBOM per architecture, also attached to the image as a signed attestation.

x86_64: 50 packages

Download sbom-x86_64.spdx.json · 25.0 MB compressed, 62.5 MB installed

PackageVersionLicense
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
cairo1.18.6-r1LGPL-2.1
fontconfig-config2.18.3-r5MIT
freetype2.14.3-r7FTL OR GPL-2.0-or-later
glib2.90.1-r2LGPL-2.1-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
graphite21.3.15-r6LGPL-2.1-or-later OR MPL-1.1
harfbuzz15.1.0-r0MIT
ld-linux-2.442.44-r16LGPL-2.1-or-later
libblkid2.42.4-r2GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC
libbrotlicommon11.2.1-r3MIT
libbrotlidec11.2.1-r3MIT
libbrotlienc11.2.1-r3MIT
libbz2-11.0.8-r30MPL-2.0 AND MIT
libexpat12.10.0-r1MIT
libffi3.8.0-r2MIT
libfontconfig12.18.3-r5MIT
libgcc16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libjpeg-turbo3.2.1-r0BSD-3-Clause AND IJG AND Zlib
liblcms2-22.20-r1MIT AND GPL-3.0-only
libmount2.42.4-r2GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC
libnspr4.40-r2MPL-2.0
libnss3.133-r0MPL-2.0
libpcre2-8-010.49-r3BSD-3-Clause
libpng16-161.6.59-r2libpng-2.0
libselinux3.11-r2libselinux-1.0
libsepol3.11-r3LGPL-2.1
libstdc++16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libwebp1.6.0-r7BSD-3-Clause
libx11-61.8.14-r4XFree86-1.1
libx11-data1.8.14-r4XFree86-1.1
libxau1.0.12-r11MIT
libxcb1.17.0-r19MIT
libxdmcp1.1.5-r14MIT
libxext61.3.7-r5MIT
libxrender10.9.13-r1XFree86-1.1
libzstd11.5.7-r13BSD-2-Clause AND GPL-2.0-only
openjpeg2.5.4-r3BSD-2-Clause
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
pixman0.46.4-r9MIT
poppler26.11.0-r0GPL-2.0-or-later
poppler-utils26.11.0-r0GPL-2.0-or-later
sqlite-libs3.54.1-r0blessing
tiff4.7.2-r5libtiff
tzdata2026f-r0CC-PDDC
wolfi-baselayout20230201-r31MIT
xz5.8.4-r1GPL-3.0-or-later
zlib1.3.2.1_rc20260921-r2MPL-2.0 AND MIT

aarch64: 50 packages

Download sbom-aarch64.spdx.json · 23.2 MB compressed, 65.4 MB installed

PackageVersionLicense
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
cairo1.18.6-r1LGPL-2.1
fontconfig-config2.18.3-r5MIT
freetype2.14.3-r7FTL OR GPL-2.0-or-later
glib2.90.1-r2LGPL-2.1-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
graphite21.3.15-r6LGPL-2.1-or-later OR MPL-1.1
harfbuzz15.1.0-r0MIT
ld-linux-2.442.44-r16LGPL-2.1-or-later
libblkid2.42.4-r2GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC
libbrotlicommon11.2.1-r3MIT
libbrotlidec11.2.1-r3MIT
libbrotlienc11.2.1-r3MIT
libbz2-11.0.8-r30MPL-2.0 AND MIT
libexpat12.10.0-r1MIT
libffi3.8.0-r2MIT
libfontconfig12.18.3-r5MIT
libgcc16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libjpeg-turbo3.2.1-r0BSD-3-Clause AND IJG AND Zlib
liblcms2-22.20-r1MIT AND GPL-3.0-only
libmount2.42.4-r2GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC
libnspr4.40-r2MPL-2.0
libnss3.133-r0MPL-2.0
libpcre2-8-010.49-r3BSD-3-Clause
libpng16-161.6.59-r2libpng-2.0
libselinux3.11-r2libselinux-1.0
libsepol3.11-r3LGPL-2.1
libstdc++16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libwebp1.6.0-r7BSD-3-Clause
libx11-61.8.14-r4XFree86-1.1
libx11-data1.8.14-r4XFree86-1.1
libxau1.0.12-r11MIT
libxcb1.17.0-r19MIT
libxdmcp1.1.5-r14MIT
libxext61.3.7-r5MIT
libxrender10.9.13-r1XFree86-1.1
libzstd11.5.7-r13BSD-2-Clause AND GPL-2.0-only
openjpeg2.5.4-r3BSD-2-Clause
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
pixman0.46.4-r9MIT
poppler26.11.0-r0GPL-2.0-or-later
poppler-utils26.11.0-r0GPL-2.0-or-later
sqlite-libs3.54.1-r0blessing
tiff4.7.2-r5libtiff
tzdata2026f-r0CC-PDDC
wolfi-baselayout20230201-r31MIT
xz5.8.4-r1GPL-3.0-or-later
zlib1.3.2.1_rc20260921-r2MPL-2.0 AND MIT

Hardening profile (OpenSCAP, DISA GPOS SRG)

Derived from the DISA General Purpose Operating System SRG; not an official DISA STIG for containers.

ArchitecturePassed / applicableNot applicableReport
x86_6485 / 91 (93.4%)107OpenSCAP report
aarch6485 / 91 (93.4%)107OpenSCAP report