# secure images Published articles for secure images. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Chainguard Java Images Now Support FIPS 140-3 DevFeed: [Chainguard Java Images Now Support FIPS 140-3]() Original publisher: [Read original article]() Published: 2024-08-27T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [bouncy castle](), [Java](), [Open JDK](), [Security]() Tags: [audits](), [bouncy-castle](), [chainguard](), [compliance](), [fedramp](), [fips-140-3](), [java](), [secure-images](), [security](), [vulnerability]() ### AI overview Chainguard Java images now support FIPS 140-3 through certified Bouncy Castle 2.0.x cryptographic modules. The update adds FIPS mode for JDK 21 while preserving FIPS 140-2 support for JDK 11 and 17, and provides pre-configured images intended to simplify upgrades, audits, compliance, and vulnerability remediation. ### Source excerpt Chainguard Java Images now support FIPS 140-3 with Bouncy Castle 2.0. Future-proof your compliance and simplify audits with pre-configured, secure images. ## Chainguard's response to CVE-2024-3094, aka the backdoor in xz library DevFeed: [Chainguard's response to CVE-2024-3094, aka the backdoor in xz library]() Original publisher: [Read original article]() Published: 2024-03-29T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [vulnerability](), [chainguard images](), [backdoor](), [OpenSSH](), [Compression](), [Linux]() Tags: [backdoor](), [chainguard](), [chainguard-images](), [compression](), [customer-trust](), [cve](), [cve-2024-3094](), [liblzma](), [linux](), [malware](), [open-source](), [openssh](), [secure-images](), [security](), [xz](), [xz-library]() ### AI overview Chainguard describes its response to CVE-2024-3094, a backdoor introduced into the upstream xz/liblzma project. It says its Images were not affected, while impacted packages were withdrawn, revoked, and rebuilt with unaffected liblzma versions. ### Source excerpt Chainguard effectively addresses CVE-2024-3094 in xz library, showcasing quick action to secure images and uphold customer trust. ## Wolfi's approach to container security and CVE management DevFeed: [Wolfi's approach to container security and CVE management]() Original publisher: [Read original article]() Published: 2024-02-08T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [Containers](), [open-source-security](), [Security](), [Open Source]() Tags: [apko](), [container-security](), [cve](), [cve-management](), [melange](), [oci](), [secure-images](), [secure-software-supply-chain](), [security](), [software-supply-chain](), [wolfi]() ### AI overview The article explains how Wolfi, a secure-by-default undistro, supports container security by helping create minimal, reproducible OCI-compliant images and reducing software supply chain risks. It also describes how Wolfi powers Chainguard Images. ### Source excerpt Discover Wolfi, the 'secure-by-default' undistro for container security, enhancing open-source software with minimal CVE counts and robust protection. ## A growing ecosystem of vulnerability scanners that now support Chainguard Images and Wolfi DevFeed: [A growing ecosystem of vulnerability scanners that now support Chainguard Images and Wolfi]() Original publisher: [Read original article]() Published: 2023-09-21T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Security](), [open-source-security](), [trivy](), [Monitoring](), [Open Source]() Tags: [chainguard](), [chainguard-images](), [container](), [container-images](), [cve](), [false-positives](), [grype](), [prisma-cloud](), [sca](), [scanners](), [secure-images](), [security](), [snyk](), [trivy](), [vulnerabilities](), [vulnerability](), [wiz](), [wolfi]() ### AI overview Chainguard Images and the Wolfi distribution are now supported by a growing ecosystem of open-source and enterprise vulnerability scanners, including Docker Scout, Grype, Snyk, Trivy, and Wiz. The broader integration helps users monitor and prioritize scan results, verify vulnerabilities, reduce scanner noise and false positives, and build more secure software. ### Source excerpt Secure your software with Chainguard & Wolfi, now recognized by leading vulnerability scanners. ## Securing the ML supply chain with new Chainguard AI Images DevFeed: [Securing the ML supply chain with new Chainguard AI Images]() Original publisher: [Read original article]() Published: 2023-08-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard images](), [Machine learning](), [chainguard](), [Kubernetes](), [sigstore]() Tags: [ai](), [chainguard](), [chainguard-ai](), [chainguard-images](), [conda-image](), [cve-remediation](), [kubeflow-image](), [ml-security](), [ml-supply-chain](), [open-ai-image](), [openai-image](), [python-image](), [sboms](), [secure-images](), [security](), [sigstore](), [software-signatures]() ### AI overview Chainguard announces a Chainguard Images AI bundle for securing the ML supply chain across the AI workload lifecycle. The collection includes development, workflow management, deployment, and vector database images, with software signatures, SBOMs, and CVE remediation. ### Source excerpt Chainguard AI Images: Your pathway to a secure ML supply chain with hardened, efficient AI/ML lifecycle solutions. ## Building Chainguard's container image registry DevFeed: [Building Chainguard's container image registry]() Original publisher: [Read original article]() Published: 2023-05-23T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [supply-chain-security](), [chainguard images](), [GitHub Actions](), [OpenID connect (OIDC)](), [Cloudflare](), [GitHub]() Tags: [chainguard](), [chainguard-image-registry](), [cloudflare](), [container](), [container-image](), [container-image-registry](), [github-actions](), [github-container-registry](), [hardened-image](), [minimal-image](), [oidc](), [registry](), [secure-by-design](), [secure-container-images](), [secure-images](), [secure-minimal-image](), [security](), [software-supply-chain-security]() ### AI overview Chainguard explains why it built its own passwordless container image registry to improve security, control distribution, and manage costs. The registry is built on Cloudflare R2, uses short-lived OIDC credentials, and allows GitHub Actions workflows--not individual employees--to push images. ### Source excerpt We built a passwordless container image registry with a focus on security to sustain the foundation for ongoing product growth & feature additions for our users. ## GitCommitted with your dream base image DevFeed: [GitCommitted with your dream base image]() Original publisher: [Read original article]() Published: 2023-04-01T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [App](), [chainguard](), [Security](), [Vulnerabilities](), [supply-chain-security]() Tags: [app](), [article](), [base-images](), [chainguard](), [compare](), [cve](), [sbom](), [secure-images](), [security](), [slsa](), [software-supply-chain](), [software-supply-chain-security](), [verify](), [vulnerabilities]() ### AI overview Chainguard introduces GitCommitted, an app for finding and comparing base images according to project needs. It helps users evaluate image size, CVE count, SLSA level, signing and verification, location and version, and SBOM availability when selecting a secure base image. ### Source excerpt Find your ideal base image with Chainguard's insights at GitCommitted, tailored to your project needs. ## Chainguard Image now available for NATS DevFeed: [Chainguard Image now available for NATS]() Original publisher: [Read original article]() Published: 2023-03-27T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Messaging](), [chainguard images](), [Containers](), [chainguard](), [Security](), [vulnerability scanning]() Tags: [chainguard](), [chainguard-images](), [cli](), [containers](), [cosign](), [documentation](), [hardened-images](), [messaging](), [minimal-image](), [nats-image](), [provenance](), [sboms](), [secure-by-default](), [secure-images](), [slsa](), [vulnerability-scanning](), [wolfi]() ### AI overview Chainguard announces a hardened Chainguard Image for NATS, built on Wolfi for containerized workloads. The image includes a development variant with the nats CLI and nsc tool, is reported to be over 50% smaller than comparable options, targets zero known CVEs, and includes source-built binaries, SBOMs, signatures, and provenance information. ### Source excerpt Learn about our hardened Chainguard Image for NATS, which is built on Wolfi, our secure by default operating system for containerized workloads. ## Chainguard Image now available for Apache Zookeeper DevFeed: [Chainguard Image now available for Apache Zookeeper]() Original publisher: [Read original article]() Published: 2023-03-20T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Containers](), [Security](), [vulnerability scanning](), [GitHub]() Tags: [apache-zookeeper](), [built-from-source](), [chainguard](), [chainguard-images](), [container-image](), [containers](), [cosign](), [docker-zookeeper](), [jdk](), [kafka-zookeeper](), [minimal-image](), [provenance](), [secure-images](), [vulnerability-scanning](), [wolfi](), [zookeeper-container](), [zookeeper-image]() ### AI overview Chainguard announces a new Chainguard Image for Apache Zookeeper. Built from source with Wolfi and Chainguard's OpenJDK JRE, the minimal image is hardened for non-root operation and a locked-down filesystem, and is presented as more than 50% smaller than alternatives. ### Source excerpt New Chainguard Image for Apache Zookeeper is over 50% smaller in size compared to alternatives. Powered by Wolfi, comes with our own JDK, and built from source. ## Hopping into spring with Chainguard's RabbitMQ Image DevFeed: [Hopping into spring with Chainguard's RabbitMQ Image]() Original publisher: [Read original article]() Published: 2023-02-24T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Messaging](), [Security](), [Cloud Native Ecosystem](), [Containers](), [vulnerability scanning](), [Erlang](), [Open Source](), [GitHub]() Tags: [base-images](), [bazel](), [chainguard](), [chainguard-images](), [container-images](), [containers](), [cosign](), [cves](), [documentation](), [image](), [messaging](), [minimal-image](), [provenance](), [rabbitmq](), [rabbitmq-image](), [sboms](), [secure-images](), [security](), [slsa](), [software-supply-chain]() ### AI overview Chainguard announces a Chainguard Image for RabbitMQ, an open-source message broker used in cloud-native applications. The image is built from source on Wolfi, with custom Erlang and OTP components, continuous patching, minimal CVEs, SBOMs, signatures, and SLSA Build Level 2 provenance. ### Source excerpt Unlock advanced messaging capabilities with Chainguard's RabbitMQ image, designed for robustness and security. ## Chainguard Image now available for HAProxy DevFeed: [Chainguard Image now available for HAProxy]() Original publisher: [Read original article]() Published: 2023-02-09T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Containers](), [Security](), [vulnerability scanning]() Tags: [chainguard](), [chainguard-images](), [containers](), [cosign](), [cves](), [haproxy](), [haproxy-images](), [image](), [load-balancer](), [minimal-image](), [sboms](), [secure-by-default](), [secure-images](), [toolchain](), [vulnerability-scanning](), [wolfi]() ### AI overview Chainguard announces a Chainguard Image for HAProxy. Built on Wolfi with a hardened toolchain, the image is designed to reduce image size and known vulnerabilities while providing binaries built from source, SBOMs, signatures, and SLSA Build Level 2 provenance. ### Source excerpt HAProxy Chainguard Image now available: Built on Wolfi, up to 90% smaller, aims for 0-known CVEs, and is built with hardened toolchain, making it memory safe. ## Yahoo and AOL Mail Begin Serving Images Through Secure Proxy Servers DevFeed: [Yahoo and AOL Mail Begin Serving Images Through Secure Proxy Servers]() Original publisher: [Read original article]() Author: marcelatoath Published: 2018-03-20T14:54:05Z Content type: release Language: en Sources: [Yahoo]() Topics: [Security](), [Server](), [App]() Tags: [android](), [aol](), [applications](), [browser](), [ios](), [secure-images](), [security](), [servers](), [yahoo-engineering]() ### AI overview Yahoo and AOL mail products are beginning to serve email images through secure proxy servers to improve speed and security and reduce phishing and scam risks. The change applies to desktop and mobile applications on iOS and Android, while most image-based open tracking remains supported. ### Source excerpt oath-postmaster: By Marcel Becker The mail team at OATH is busy integrating Yahoo and AOL technology to deliver an even better experience across all our consumer mail products. While privacy and security are top priority for us, we also want to improve the experience and remove unnecessary clutter across all of our products. Starting this week we will be serving images in mails via our own secure proxy servers. This will not only increase speed and security in our own mail products and reduce the risk of phishing and other scams, but it will also mean that our users don't have to fiddle around with those "enable images" settings. Messages and inline images will now just show up as originally intended. We are aware that commercial mail senders are relying on images (so-called pixels) to track delivery and open rates. Our proxy solution will continue to support most of these cases and ensure that true mail opens are recorded. For senders serving dynamic content based on the recipient's location (leveraging standard IP-based browser and app capabilities) we recommend falling back on other tools and technologies which do not rely on IP-based targeting. All of our consumer mail applications (Yahoo and AOL) will benefit from this change. This includes our desktop products as well as our mobile applications across iOS and Android. If you have any feedback or want to discuss those changes with us personally, just send us a note to mail-questions@oath.com.