buildah | Minimus Gallery

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

Unique CVE count. Some vulnerabilities may impact multiple packages.

reg.mini.dev/buildah:latest

100% reduction

vs.

quay.io/buildah/stable

Daily report prepared September 22, 2026 at 3:31 AM

100% reduction

Compressed image sizes for amd64.

104 total packages

104 combined OS and application packages

367 total packages

125 packages in additional layers

242 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Report prepared September 22, 2026 at 3:31 AM

Package	version	license	type
cpp	16.2.1-2.fc44	GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel	rpm
cracklib	2.10.3-1.fc44	LGPL-2.1-or-later	rpm
criu	4.2.1-1.fc44	GPL-2.0-only AND LGPL-2.1-only AND MIT	rpm
criu-libs	4.2.1-1.fc44	GPL-2.0-only AND LGPL-2.1-only AND MIT	rpm
crun	1.28-1.fc44	GPL-2.0-only	rpm