# image CVEs

Published articles for image CVEs.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Announcing early access to Chainguard's CUDA Optimized Images

DevFeed: [Announcing early access to Chainguard's CUDA Optimized Images](<https://devfeed.tech/articles/announcing-early-access-to-chainguard-s-cuda-optimized-images-12885.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/announcing-early-access-to-chainguards-cuda-optimized-images>)

Published: 2024-04-25T00:00:00Z

Content type: news

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [CUDA](<https://devfeed.tech/topics/cuda.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [GPU](<https://devfeed.tech/topics/gpu.md>), [PyTorch](<https://devfeed.tech/topics/pytorch.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [model-deployment](<https://devfeed.tech/topics/model-deployment.md>), [AI Development](<https://devfeed.tech/topics/ai-development.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-and-cybersecurity](<https://devfeed.tech/tags/ai-and-cybersecurity.md>), [ai-development](<https://devfeed.tech/tags/ai-development.md>), [ai-software-supply-chain](<https://devfeed.tech/tags/ai-software-supply-chain.md>), [ai-software-supply-chain-security](<https://devfeed.tech/tags/ai-software-supply-chain-security.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [chainguard-pytorch-image](<https://devfeed.tech/tags/chainguard-pytorch-image.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [containers](<https://devfeed.tech/tags/containers.md>), [cuda](<https://devfeed.tech/tags/cuda.md>), [cves](<https://devfeed.tech/tags/cves.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [gpu](<https://devfeed.tech/tags/gpu.md>), [image-cves](<https://devfeed.tech/tags/image-cves.md>), [machine-learning](<https://devfeed.tech/tags/machine-learning.md>), [ml](<https://devfeed.tech/tags/ml.md>), [ml-and-cybersecurity](<https://devfeed.tech/tags/ml-and-cybersecurity.md>), [ml-software-supply-chain](<https://devfeed.tech/tags/ml-software-supply-chain.md>), [ml-software-supply-chain-security](<https://devfeed.tech/tags/ml-software-supply-chain-security.md>), [model-deployment](<https://devfeed.tech/tags/model-deployment.md>), [nemo](<https://devfeed.tech/tags/nemo.md>), [nvidia](<https://devfeed.tech/tags/nvidia.md>), [pytorch](<https://devfeed.tech/tags/pytorch.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

Chainguard announces early access to CUDA Optimized Images, designed to secure and simplify the deployment and management of NVIDIA accelerated AI applications in containers. The images target model deployment tampering, container vulnerabilities, large image sizes, driver and CUDA compatibility issues, dependency mismatches, and GPU debugging challenges.

### Source excerpt

Accelerate AI development with Chainguard's CUDA Optimized Images. Secure, streamlined NVIDIA deployments -- join our Early Access Program!

## The zero CVE challenge: Can official Docker Hub images pass the test?

DevFeed: [The zero CVE challenge: Can official Docker Hub images pass the test?](<https://devfeed.tech/articles/the-zero-cve-challenge-can-official-docker-hub-images-pass-the-test-13276.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/the-zero-cve-challenge-can-official-docker-hub-images-pass-the-test>)

Published: 2023-08-03T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Docker](<https://devfeed.tech/topics/docker.md>), [Docker Hub](<https://devfeed.tech/topics/docker-hub.md>), [container-security](<https://devfeed.tech/topics/container-security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Debian](<https://devfeed.tech/topics/debian.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [grype](<https://devfeed.tech/topics/grype.md>)

Tags: [container-security](<https://devfeed.tech/tags/container-security.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cves](<https://devfeed.tech/tags/cves.md>), [debian](<https://devfeed.tech/tags/debian.md>), [docker](<https://devfeed.tech/tags/docker.md>), [docker-hub](<https://devfeed.tech/tags/docker-hub.md>), [docker-hub-image](<https://devfeed.tech/tags/docker-hub-image.md>), [docker-images](<https://devfeed.tech/tags/docker-images.md>), [grype](<https://devfeed.tech/tags/grype.md>), [image-cves](<https://devfeed.tech/tags/image-cves.md>), [security](<https://devfeed.tech/tags/security.md>), [software](<https://devfeed.tech/tags/software.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

An analysis of ten widely used official Docker Hub images found that updating all operating-system packages reduced vulnerability counts by less than 6% on average. Approximately 98% of the vulnerabilities were associated with Debian-based packages, and the average image still had 225 vulnerabilities after updates.

### Source excerpt

Uncover the findings of the Zero CVE Challenge on Official Docker Hub Images, a step towards secure containerization.

## How Chainguard fixes vulnerabilities before they're detected

DevFeed: [How Chainguard fixes vulnerabilities before they're detected](<https://devfeed.tech/articles/how-chainguard-fixes-vulnerabilities-before-they-re-detected-13083.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/how-chainguard-fixes-vulnerabilities-before-theyre-detected>)

Published: 2023-07-14T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Go](<https://devfeed.tech/topics/go.md>), [Security](<https://devfeed.tech/topics/security.md>), [Software](<https://devfeed.tech/topics/software.md>), [Pull Request](<https://devfeed.tech/topics/pull-request.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [releases](<https://devfeed.tech/topics/releases.md>), [cloud-infrastructure](<https://devfeed.tech/topics/cloud-infrastructure.md>), [OAI-PMH](<https://devfeed.tech/topics/oai-pmh.md>)

Tags: [automated](<https://devfeed.tech/tags/automated.md>), [base-images](<https://devfeed.tech/tags/base-images.md>), [build](<https://devfeed.tech/tags/build.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [cve](<https://devfeed.tech/tags/cve.md>), [go](<https://devfeed.tech/tags/go.md>), [http](<https://devfeed.tech/tags/http.md>), [image-cves](<https://devfeed.tech/tags/image-cves.md>), [library](<https://devfeed.tech/tags/library.md>), [net](<https://devfeed.tech/tags/net.md>), [repo](<https://devfeed.tech/tags/repo.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [scanners](<https://devfeed.tech/tags/scanners.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>), [vulnerability-scanning](<https://devfeed.tech/tags/vulnerability-scanning.md>), [wolfi](<https://devfeed.tech/tags/wolfi.md>)

### AI overview

Chainguard describes how Wolfi rapidly remediated CVE-2023-29406 in Go by automating upstream release monitoring, package rebuilding, testing, review, and release. The article explains that the fix reached Wolfi-packaged Go applications before vulnerability scanners had the information needed to detect it, and that the updated Go image and dependent packages were rebuilt to include the fix.

### Source excerpt

Uncover Chainguard's strategic vulnerability remediation, enhancing your software's security posture.

## A thought experiment on using low-vulnerability Chainguard Images to speed government software delivery

DevFeed: [A thought experiment on using low-vulnerability Chainguard Images to speed government software delivery](<https://devfeed.tech/articles/ship-software-to-uncle-sam-faster-with-zero-known-vulnerability-containers-13230.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/ship-software-to-uncle-sam-faster-with-zero-known-vulnerability-containers>)

Published: 2023-06-20T00:00:00Z

Content type: opinion

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Containers](<https://devfeed.tech/topics/containers.md>), [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [authority to operate](<https://devfeed.tech/topics/authority-to-operate.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [chainguard labs](<https://devfeed.tech/topics/chainguard-labs.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [ato](<https://devfeed.tech/tags/ato.md>), [authority-to-operate](<https://devfeed.tech/tags/authority-to-operate.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [chainguard-labs](<https://devfeed.tech/tags/chainguard-labs.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [containers](<https://devfeed.tech/tags/containers.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [government](<https://devfeed.tech/tags/government.md>), [image-cves](<https://devfeed.tech/tags/image-cves.md>), [secure-container-image](<https://devfeed.tech/tags/secure-container-image.md>), [secure-minimal-image](<https://devfeed.tech/tags/secure-minimal-image.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>), [vulnerability-scanner](<https://devfeed.tech/tags/vulnerability-scanner.md>)

### AI overview

This opinion article proposes studying whether Chainguard Images with zero-known or low vulnerability counts could reduce timelines and staff costs in government Authority to Operate processes. It presents this as a hypothesis requiring comparison with other ATO processes, not as a demonstrated result.

### Source excerpt

Discover how 0-known vulnerability containers from Chainguard Labs could accelerate software delivery to the government.