{"id":84803,"date":"2026-07-15T16:30:00","date_gmt":"2026-07-15T07:30:00","guid":{"rendered":"https:\/\/www.creationline.com\/tech-blog\/?p=84803"},"modified":"2026-07-16T11:18:30","modified_gmt":"2026-07-16T02:18:30","slug":"docker-hardened-image-dhi-%e3%82%92cve%e3%81%ae%e8%a6%b3%e7%82%b9%e3%81%a7%e7%a2%ba%e8%aa%8d%e3%81%97%e3%81%a6%e3%81%bf%e3%81%9f-docker-security","status":"publish","type":"post","link":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803","title":{"rendered":"Docker Hardened Image (DHI) \u3092CVE\u306e\u89b3\u70b9\u3067\u78ba\u8a8d\u3057\u3066\u307f\u305f #docker #security"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">\u306f\u3058\u3081\u306b<\/h2>\n\n\n\n<p>2025\u5e745\u6708\u3001Docker\u793e\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5b89\u5168\u306a\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3067\u3042\u308b<a href=\"https:\/\/www.docker.com\/ja-jp\/blog\/introducing-docker-hardened-images\/\" target=\"_blank\" rel=\"noreferrer noopener\">Docker Hardened Image\u3092\u767a\u8868<\/a>\u3057\u307e\u3057\u305f\u3002\u5f93\u6765\u304b\u3089<a href=\"https:\/\/hub.docker.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Docker Hub<\/a>\u3067\u306fDocker\u793e\u304c\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u3057\u3066\u3044\u308b\u300c\u516c\u5f0f\u30a4\u30e1\u30fc\u30b8\u300d\u304c\u3042\u308a\u307e\u3057\u305f\u304c\u3001\u3055\u3089\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u63a8\u3057\u9032\u3081\u305f\u5f62\u3067\u3059\u3002\u305d\u3057\u3066\u304a\u3088\u305d\u534a\u5e74\u5f8c\u306e2025\u5e7412\u6708\u3001<a href=\"https:\/\/www.docker.com\/ja-jp\/blog\/docker-hardened-images-for-every-developer\/\" target=\"_blank\" rel=\"noreferrer noopener\">Docker Hardened Image\u306b\u7121\u6599\u30d7\u30e9\u30f3\u304c\u8ffd\u52a0<\/a>\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p>\u672c\u7a3f\u3067\u306f\u3001\u3053\u306eDocker Hardened Image (DHI)\u304c\u3069\u306e\u3088\u3046\u306a\u3082\u306e\u306a\u306e\u304b\u3001<a href=\"https:\/\/www.ipa.go.jp\/security\/vuln\/scap\/cve.html\" target=\"_blank\" rel=\"noreferrer noopener\">CVE<\/a> (Common Vulnerabilities and Exposures; \u5171\u901a\u8106\u5f31\u6027\u8b58\u5225\u5b50)\u306e\u89b3\u70b9\u3067\u78ba\u304b\u3081\u3066\u307f\u307e\u3059\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u516c\u5f0f\u30a4\u30e1\u30fc\u30b8\u306e\u8106\u5f31\u6027<\/h2>\n\n\n\n<p>\u4eca\u56de\u306f\u30d9\u30fc\u30b9\u30a4\u30e1\u30fc\u30b8\u3068\u3057\u3066\u3001\u516c\u5f0f\u30a4\u30e1\u30fc\u30b8\u306e <a href=\"https:\/\/hub.docker.com\/layers\/library\/python\/3.14.6-slim-trixie\" target=\"_blank\" rel=\"noreferrer noopener\">python:3.14.6-slim-trixie<\/a> \u3092DHI\u306b\u5dee\u3057\u66ff\u3048\u3066\u307f\u307e\u3057\u3087\u3046\u3002<\/p>\n\n\n\n<p>\u307e\u305a\u3001<a href=\"https:\/\/trivy.dev\/\" target=\"_blank\" rel=\"noreferrer noopener\">Trivy<\/a>\u3067\u516c\u5f0f\u30a4\u30e1\u30fc\u30b8\u306e\u8106\u5f31\u6027\u3092\u78ba\u8a8d\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">% docker container run --rm \\\n  -v \/var\/run\/docker.sock:\/var\/run\/docker.sock \\\n  aquasec\/trivy:0.72.0@sha256:cffe3f5161a47a6823fbd23d985795b3ed72a4c806da4c4df16266c02accdd6f \\\n  image --severity HIGH,CRITICAL \\\n  --scanners vuln \\\n  python:3.14.6-slim-trixie@sha256:b877e50bd90de10af8d82c57a022fc2e0dc731c5320d762a27986facfc3355c1\n(\u7565)\nTotal: 20 (HIGH: 18, CRITICAL: 2)\n(\u7565)<\/pre>\n\n\n\n<p>20\u4ef6\u3042\u308a\u307e\u3057\u305f\u3002 <code>python:3.14.6-slim-trixie<\/code> \u30a4\u30e1\u30fc\u30b8\u306b\u306f\u3001\u8106\u5f31\u6027\u3092\u6301\u3063\u305f\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u542b\u307e\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p>CRITICAL\u3068\u306a\u3063\u3066\u3044\u308b\u8106\u5f31\u6027\u306f <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-42496\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2026-42496<\/a> \u3068 <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-8376\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2026-8376<\/a> \u3067\u3069\u3061\u3089\u3082 perl \u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u3082\u306e\u3067\u3059\u3002\u5185\u5bb9\u3092\u78ba\u8a8d\u3057\u305f\u3068\u3053\u308d\u3001\u524d\u8005\u306f perl \u6a19\u6e96\u30e9\u30a4\u30d6\u30e9\u30ea\u3001\u5f8c\u8005\u306f32\u30d3\u30c3\u30c8\u30d3\u30eb\u30c9\u3001\u3068\u3044\u3046\u3053\u3068\u306764\u30d3\u30c3\u30c8Python\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u3059\u308b\u306a\u3089\u95a2\u4fc2\u306a\u3044\u306f\u305a\u3067\u3059\u3002\u305d\u308c\u3089\u30921\u30641\u3064\u78ba\u8a8d\u3059\u308b\u306e\u306f\u5927\u5909\u3067\u3059\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Docker Hardened Image (DHI)\u306e\u8106\u5f31\u6027<\/h2>\n\n\n\n<p>DHI\u306f\u300c<a href=\"https:\/\/www.docker.com\/ja-jp\/products\/hardened-images\/\" target=\"_blank\" rel=\"noreferrer noopener\">\u307b\u307c\u30bc\u30ed\u306eCVE<\/a>\u300d\u3092\u8b33\u3063\u3066\u3044\u308b\u306e\u3067\u3001\u3082\u3057\u8106\u5f31\u6027\u304c\u691c\u77e5\u3055\u308c\u305f\u3068\u3057\u3066\u3082\u78ba\u8a8d\u4f5c\u696d\u304c\u5927\u5e45\u306b\u6e1b\u308b\u3053\u3068\u304c\u671f\u5f85\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u5dee\u3057\u66ff\u3048\u5148\u30a4\u30e1\u30fc\u30b8\u306f <a href=\"https:\/\/hub.docker.com\/hardened-images\/catalog\/dhi\/python\/images\" target=\"_blank\" rel=\"noreferrer noopener\">dhi.io\/python:3.14.6-debian13<\/a> \u3068\u306a\u308a\u307e\u3059\u3002\u3053\u308c\u3092Trivy\u3067\u30b9\u30ad\u30e3\u30f3\u3057\u3066\u307f\u307e\u3057\u3087\u3046\u3002\u306a\u304a\u3001\u7121\u6599\u30d7\u30e9\u30f3\u3067\u3082 Docker Hub \u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u3067\u30ed\u30b0\u30a4\u30f3\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">% docker login dhi.io\n(\u7565)\n% docker image pull dhi.io\/python:3.14.6-debian13@sha256:c82da5a1a30a6214f45c42def5b6f5b85981c7dc7a1802015a6ebf264675436d\n(\u7565)\n% docker container run --rm \\\n  -v \/var\/run\/docker.sock:\/var\/run\/docker.sock \\\n  aquasec\/trivy:0.72.0@sha256:cffe3f5161a47a6823fbd23d985795b3ed72a4c806da4c4df16266c02accdd6f \\\n  image --severity HIGH,CRITICAL \\\n  --scanners vuln \\\n  dhi.io\/python:3.14.6-debian13@sha256:c82da5a1a30a6214f45c42def5b6f5b85981c7dc7a1802015a6ebf264675436d\n(\u7565)\nTotal: 53 (HIGH: 52, CRITICAL: 1)\n(\u7565)<\/pre>\n\n\n\n<p>\u306a\u3093\u3068\u3001\u8106\u5f31\u6027\u306e\u6570\u304c\u516c\u5f0f\u30a4\u30e1\u30fc\u30b8\u3088\u308a\u500d\u4ee5\u4e0a\u306b\u5897\u3048\u3066\u3057\u307e\u3044\u307e\u3057\u305f\u2026\u3002\u3053\u308c\u306f\u4e00\u4f53\u3069\u3046\u3044\u3046\u3053\u3068\u306a\u306e\u3067\u3057\u3087\u3046\u304b\uff1f<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SBOM\u306e\u6bd4\u8f03<\/h2>\n\n\n\n<p>Trivy \u306b\u306f <a href=\"https:\/\/trivy.dev\/docs\/latest\/supply-chain\/sbom\/\" target=\"_blank\" rel=\"noreferrer noopener\">SBOM<\/a> (Software Bill of Materials; \u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u90e8\u54c1\u8868) \u3092\u51fa\u529b\u3059\u308b\u6a5f\u80fd\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u308c\u3092\u5229\u7528\u3057\u3066\u3001\u4e21\u30a4\u30e1\u30fc\u30b8\u304c\u4f55\u3092\u6301\u3063\u3066\u3044\u308b\u306e\u304b\u3092\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3057\u3087\u3046\u3002<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">% docker container run --rm \\\n  -v \/var\/run\/docker.sock:\/var\/run\/docker.sock \\\n  aquasec\/trivy:0.72.0@sha256:cffe3f5161a47a6823fbd23d985795b3ed72a4c806da4c4df16266c02accdd6f \\\n  image --format cyclonedx \\\n  python:3.14.6-slim-trixie@sha256:b877e50bd90de10af8d82c57a022fc2e0dc731c5320d762a27986facfc3355c1 > \/tmp\/python.json\n% docker container run --rm \\\n  -v \/var\/run\/docker.sock:\/var\/run\/docker.sock \\\n  aquasec\/trivy:0.72.0@sha256:cffe3f5161a47a6823fbd23d985795b3ed72a4c806da4c4df16266c02accdd6f \\\n  image --format cyclonedx \\\n  dhi.io\/python:3.14.6-debian13@sha256:c82da5a1a30a6214f45c42def5b6f5b85981c7dc7a1802015a6ebf264675436d > \/tmp\/dhi.json<\/pre>\n\n\n\n<p>\u4e21\u8005\u306e\u5dee\u5206\u3092\u53d6\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"diff\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">% diff -u &lt;(cat \/tmp\/python.json | jq '.components[].purl' | sed -e 's\/@.*\/\/' -e 's!\"pkg:deb\/debian\/!!') &lt;(cat \/tmp\/dhi.json | jq '.components[].purl' | sed -e 's\/@.*\/\/' -e 's!\"pkg:deb\/debian\/!!')\n--- \/proc\/self\/fd\/17    2026-07-14 18:34:39.823998223 +0900\n+++ \/proc\/self\/fd\/20    2026-07-14 18:34:39.823998223 +0900\n@@ -1,89 +1,51 @@\n null\n-adduser\n-apt\n base-files\n-base-passwd\n-bash\n-bsdutils\n ca-certificates\n-coreutils\n-dash\n debconf\n-debian-archive-keyring\n-debianutils\n-diffutils\n-dpkg\n-findutils\n gcc-14-base\n-grep\n-gzip\n-hostname\n-init-system-helpers\n-libacl1\n-libapt-pkg7.0\n-libattr1\n-libaudit-common\n-libaudit1\n-libblkid1\n-libbsd0\n libbz2-1.0\n-libc-bin\n+libc-dev-bin\n+libc6-dev\n libc6\n-libcap-ng0\n-libcap2\n+libcrypt-dev\n libcrypt1\n libdb5.3t64\n-libdebconfclient0\n+libexpat1-dev\n+libexpat1\n libffi8\n libgcc-s1\n+libgdbm-compat4t64\n libgdbm6t64\n-libgmp10\n-libhogweed6t64\n-liblastlog2-2\n-liblz4-1\n liblzma5\n-libmd0\n-libmount1\n libncursesw6\n-libnettle8t64\n-libpam-modules-bin\n-libpam-modules\n-libpam-runtime\n-libpam0g\n-libpcre2-8-0\n+libpython-3.14-dev\n+libpython-3.14-minimal\n+libpython-3.14-stdlib\n+libpython-3.14\n libreadline8t64\n-libseccomp2\n-libselinux1\n-libsemanage-common\n-libsemanage2\n-libsepol2\n-libsmartcols1\n libsqlite3-0\n libssl3t64\n libstdc%2B%2B6\n-libsystemd0\n libtinfo6\n-libudev1\n libuuid1\n-libxxhash0\n libzstd1\n-login.defs\n-login\n-mawk\n-mount\n+linux-libc-dev\n ncurses-base\n ncurses-bin\n netbase\n openssl-provider-legacy\n openssl\n-passwd\n-perl-base\n+python-3.14-dev\n+python-3.14-minimal\n+python-3.14\n+python3-pip-whl\n+python3-pip\n+python3-setuptools-whl\n+python3-setuptools\n+python3-wheel-whl\n+python3-wheel\n readline-common\n-sed\n-sqv\n-sysvinit-utils\n-tar\n+rpcsvc-proto\n tzdata\n-util-linux\n+zlib1g-dev\n zlib1g\n-\"pkg:pypi\/pip<\/pre>\n\n\n\n<p>\u3053\u308c\u3092\u898b\u308b\u3068\u3001DHI\u304b\u3089\u306f\u3001\u30b7\u30a7\u30eb\u3084\u57fa\u672c\u7684\u306a\u30b3\u30de\u30f3\u30c9\u304c\u524a\u9664\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002\u305d\u306e\u305f\u3081\u3001\u4e07\u304c\u4e00\u30b3\u30f3\u30c6\u30ca\u306b\u4fb5\u5165\u3055\u308c\u3066\u3082\u81ea\u7531\u306a\u884c\u52d5\u304c\u56f0\u96e3\u3067\u3042\u308b\u3068\u308f\u304b\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u4e00\u65b9\u3067 <code>libc6-dev<\/code> \u30d1\u30c3\u30b1\u30fc\u30b8\u3084 <code>linux-libc-dev<\/code> \u30d1\u30c3\u30b1\u30fc\u30b8\u3068\u3044\u3063\u305f\u958b\u767a\u7528\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u591a\u304f\u8ffd\u52a0\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002\u304a\u305d\u3089\u304f\u3053\u306e <code>dhi.io\/python:3.14.6-debian13<\/code> \u30a4\u30e1\u30fc\u30b8\u306e\u307f\u3067Python\u30e9\u30a4\u30d6\u30e9\u30ea\u3092\u30d3\u30eb\u30c9\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u3066\u3044\u308b\u306e\u3067\u3057\u3087\u3046\u3002\u3057\u304b\u3057\u30a4\u30e1\u30fc\u30b8\u30d3\u30eb\u30c9\u306e\u30d9\u30b9\u30c8\u30d7\u30e9\u30af\u30c6\u30a3\u30b9\u306f\u3001\u958b\u767a\u7528\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u30d3\u30eb\u30c9\u30b9\u30c6\u30fc\u30b8\u306b\u3068\u3069\u3081\u3066\u304a\u304d\u3001\u6210\u679c\u7269\u306e\u307f\u3092\u542b\u3093\u3060\u30d5\u30a1\u30a4\u30ca\u30eb\u30b9\u30c6\u30fc\u30b8\u3092\u69cb\u6210\u3059\u308b\u30de\u30eb\u30c1\u30b9\u30c6\u30fc\u30b8\u30d3\u30eb\u30c9\u306e\u306f\u305a\u3067\u3059\u3002\u30d5\u30a1\u30a4\u30ca\u30eb\u30b9\u30c6\u30fc\u30b8\u306e\u30d9\u30fc\u30b9\u30a4\u30e1\u30fc\u30b8\u306b\u4f7f\u3044\u305f\u3044\u300cHardened\u300d\u30a4\u30e1\u30fc\u30b8\u304c\u3053\u308c\u3068\u3044\u3046\u306e\u306f\u3044\u304b\u304c\u306a\u3082\u306e\u304b\u3068\u3044\u3046\u6c17\u304c\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u5b9f\u306f\u3053\u306e <code>linux-libc-dev<\/code> \u30d1\u30c3\u30b1\u30fc\u30b8\u304c1\u3064\u306730\u4ee5\u4e0a\u306eCVE\u3092\u5897\u3084\u3057\u3066\u3044\u308b\u306e\u3067\u3059\u304c\u3001<a href=\"https:\/\/hub.docker.com\/hardened-images\/catalog\/dhi\/python\/images\" target=\"_blank\" rel=\"noreferrer noopener\">dhi.io\/python:3.14.6-debian13<\/a>\u3067\u306f\u300cVulnerabilities 0\u300d\u3068\u8868\u793a\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u306e50\u4ee5\u4e0a\u306e\u6570\u306e\u98df\u3044\u9055\u3044\u306f\u4e00\u4f53\u3069\u3046\u3044\u3046\u3053\u3068\u3067\u3057\u3087\u3046\u304b\uff1f<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">VEX (Vulnerability Exploitability eXchange) \u3068\u306f<\/h2>\n\n\n\n<p>\u3053\u3053\u3067VEX\u3068\u3044\u3046\u4ed5\u7d44\u307f\u3092\u898b\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<p>VEX (Vulnerability Exploitability eXchange)\u3068\u306f\u3001<a href=\"https:\/\/www.ntia.gov\/\" target=\"_blank\" rel=\"noreferrer noopener\">\u7c73\u56fd\u901a\u4fe1\u60c5\u5831\u7ba1\u7406\u5c40<\/a>\u304c\u958b\u767a\u3057\u305f\u3001\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u304c\u8106\u5f31\u6027\u306e\u5f71\u97ff\u3092\u53d7\u3051\u308b\u304b\u3069\u3046\u304b\u3092\u793a\u3059\u3001\u6a5f\u68b0\u5224\u8aad\u53ef\u80fd\u306a\u30d5\u30a9\u30fc\u30de\u30c3\u30c8\u3067\u3059\u3002\u3064\u307e\u308a\u3001\u3053\u308c\u3092\u898b\u308b\u3053\u3068\u3067CVE\u304c\u5bfe\u7b56\u3057\u306a\u3051\u308c\u3070\u3044\u3051\u306a\u3044\u306e\u304b\u3001\u7121\u8996\u3067\u304d\u308b\u3082\u306e\u304b\u3092\u5224\u65ad\u3067\u304d\u308b\u3068\u3044\u3046\u3053\u3068\u3067\u3059\u3002<\/p>\n\n\n\n<p>DHI\u306eVEX\u306f\u3001<a href=\"https:\/\/docs.docker.com\/scout\/\" target=\"_blank\" rel=\"noreferrer noopener\">Docker Scout<\/a>\u3068\u3044\u3046Docker CLI\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u901a\u3057\u3066\u53d6\u5f97\u3067\u304d\u307e\u3059\u3002\u3053\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u306f\u6a19\u6e96\u3067\u306f\u542b\u307e\u308c\u3066\u3044\u306a\u3044\u305f\u3081\u3001\u5225\u9014\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306e\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">% docker scout vex get dhi.io\/python:3.14.6-debian13 > \/tmp\/vex.json\n   \u2713 SBOM obtained from attestation, 82 packages found\n   \u2713 Provenance obtained from attestation\n   \u2713 Found 1 VEX attestation for image<\/pre>\n\n\n\n<p>\u53d6\u5f97\u3057\u305fVEX\u3092\u898b\u3066\u307f\u308b\u3068\u3001\u554f\u984c\u306e <code>linux-libc-dev<\/code> \u30d1\u30c3\u30b1\u30fc\u30b8\u306b\u3064\u3044\u3066\u3001CVE\u3092\u7121\u8996\u3059\u308b\u6307\u5b9a\u304c\u306a\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002\u6b21\u306f\u4e00\u90e8\u3067\u3059\u3002<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"json\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">    {\n      \"@id\": \"pkg:deb\/debian\/linux-libc-dev\"\n    },\n\uff08\u7565)\n  \"status\": \"not_affected\",\n  \"status_notes\": \"Marked no-dsa by Debian Security Team; see https:\/\/security-tracker.debian.org\/tracker\/CVE-2004-0230\",\n  \"justification\": \"vulnerable_code_cannot_be_controlled_by_adversary\",\n  \"timestamp\": \"2026-04-28T21:44:53Z\"<\/pre>\n\n\n\n<p>\u3053\u306e<a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2004-0230\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2004-0230<\/a>\u306f\u30ab\u30fc\u30cd\u30eb\u672c\u4f53\u306e\u30d0\u30b0\u3067\u3059\u3002\u30d8\u30c3\u30c0\u30d5\u30a1\u30a4\u30eb\u306e\u307f\u3092\u542b\u3080 <code>linux-libc-dev<\/code> \u30d1\u30c3\u30b1\u30fc\u30b8\u306b\u306f\u5f71\u97ff\u304c\u306a\u3044\u3082\u306e\u3067\u3059\u3057\u3001\u305d\u3082\u305d\u3082Docker\u30b3\u30f3\u30c6\u30ca\u306f\u30db\u30b9\u30c8\u306e\u30ab\u30fc\u30cd\u30eb\u3067\u52d5\u4f5c\u3059\u308b\u3082\u306e\u3067\u3042\u308b\u305f\u3081\u3001\u7121\u8996\u3059\u308b\u5224\u65ad\u304c\u306a\u3055\u308c\u3066\u3044\u308b\u306e\u306f\u59a5\u5f53\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u3053\u306eVEX\u3092\u6307\u5b9a\u3057\u3066\u518d\u5ea6Trivy\u3067\u30b9\u30ad\u30e3\u30f3\u3057\u3066\u307f\u307e\u3057\u3087\u3046\u3002<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">% docker container run --rm \\\n  -v \/var\/run\/docker.sock:\/var\/run\/docker.sock \\\n  -v \/tmp\/vex.json:\/tmp\/vex.json:ro \\\n  aquasec\/trivy:0.72.0@sha256:cffe3f5161a47a6823fbd23d985795b3ed72a4c806da4c4df16266c02accdd6f \\\n  image --severity HIGH,CRITICAL \\\n  --scanners vuln \\\n  --vex \/tmp\/vex.json \\\n  dhi.io\/python:3.14.6-debian13@sha256:c82da5a1a30a6214f45c42def5b6f5b85981c7dc7a1802015a6ebf264675436d\n(\u7565)<\/pre>\n\n\n\n<p>CVE\u672a\u691c\u51fa\u3067\u3057\u305f\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u3057\u304b\u3057\u2026<\/h2>\n\n\n\n<p>\u3053\u308c\u306b\u306f2\u3064\u306e\u610f\u898b\u304c\u3042\u308b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Docker\u5074\u3067\u3001VEX\u3068\u3044\u3046\u5171\u901a\u30d5\u30a9\u30fc\u30de\u30c3\u30c8\u3067\u5f71\u97ff\u304c\u306a\u304f\u7121\u8996\u3067\u304d\u308bCVE\u3092\u6559\u3048\u3066\u304f\u308c\u3066\u3044\u308b\u306e\u3067\u3001\u5bfe\u8c61\u306eCVE\u304b\u3069\u3046\u304b\u78ba\u8a8d\u3059\u308b\u624b\u9593\u304c\u7701\u3051\u308b\u3002<\/li>\n\n\n\n<li>Docker\u5074\u304c\u81ea\u5206\u81ea\u8eab\u3067\u8a55\u4fa1\u3057\u3066\u3044\u308bVEX\u3092\u4fe1\u983c\u3067\u304d\u308b\u306e\u304b\u3002\u7b2c\u4e09\u8005\u306e\u8a55\u4fa1\u3067\u306f\u306a\u3044\u306e\u3067\u5fae\u5999\u306b\u611f\u3058\u308b\u3002<\/li>\n<\/ul>\n\n\n\n<p>\u7591\u3044\u51fa\u3057\u305f\u3089\u30ad\u30ea\u304c\u306a\u3044\u3067\u3059\u3057\u3001DHI\u306e\u30e1\u30ea\u30c3\u30c8\u304cCVE\u306e\u6570\u3060\u3051\u3067\u306f\u306a\u3044\u306e\u306f\u78ba\u304b\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u305d\u308c\u3067\u3082\u300c\u307b\u307c\u30bc\u30ed\u306eCVE\u300d\u3068\u8a00\u3063\u3066\u3044\u308b\u306e\u306b\u7b2c\u4e09\u8005\u306e <strong>\u7d20\u306e<\/strong> Trivy\u3067\u30b9\u30ad\u30e3\u30f3\u3057\u305f\u3089\u5dee\u3057\u66ff\u3048\u524d\u306e\u30a4\u30e1\u30fc\u30b8\u3088\u308a\u3082CVE\u304c\u591a\u304f\u51fa\u305f\u3001\u3068\u3044\u3046\u306e\u306f\u5c11\u3057\u30ac\u30c3\u30ab\u30ea\u3057\u305f\u3068\u3044\u3046\u306e\u304c\u672c\u97f3\u3067\u3059\u3002CI\u306b\u7d44\u307f\u8fbc\u3080\u306e\u3082\u9762\u5012\u3067\u3059\u3002\u4ee5\u524d\u306e\u8a18\u4e8b\u300c<a href=\"https:\/\/www.creationline.com\/tech-blog\/84505\" target=\"_blank\" rel=\"noreferrer noopener\">\u5805\u7262\u30fb\u5b89\u5168\u30fb\u4fe1\u983c\u306e\u300cChainguard\u300d\u3092\u8a66\u3057\u3066\u307f\u305f<\/a>\u300d\u3067\u78ba\u8a8d\u3057\u305fChainguard\u306e\u30a4\u30e1\u30fc\u30b8\u306f\u3001VEX\u306a\u3069\u306f\u4f7f\u308f\u305a\u7d20\u306eTrivy\u3067CVE\u30bc\u30ed\u3067\u3057\u305f\u3002<\/p>\n\n\n\n<p>\u305d\u306eChainguard\u793e\u306f\u300c<a href=\"https:\/\/www.chainguard.dev\/unchained\/going-deep-upstream-distros-and-hidden-cves\" target=\"_blank\" rel=\"noreferrer noopener\">Going deep: Upstream distros and hidden CVEs<\/a>\u300d\u3068\u3044\u3046\u30d6\u30ed\u30b0\u3067\u3001\u7af6\u5408\u95a2\u4fc2\u306b\u3042\u308bDHI\u306e\u53d6\u308a\u7d44\u307f\u3092\u4e0d\u5341\u5206\u3067\u3042\u308b\u3068\u6307\u6458\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u307e\u3068\u3081<\/h2>\n\n\n\n<p>\u672c\u7a3f\u3067\u306f\u3001Docker Hardened Image (DHI)\u3092CVE\u306e\u89b3\u70b9\u3067\u898b\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p>DHI\u304c\u7279\u5fb4\u3068\u3057\u3066\u63b2\u3052\u3066\u3044\u308b\u300c\u307b\u307c\u30bc\u30ed\u306eCVE\u300d\u306f\u3001Docker\u793e\u304c\u5f71\u97ff\u304c\u306a\u3044\u3068\u8003\u3048\u308bCVE\u306e\u691c\u77e5\u3092VEX\u3068\u3044\u3046\u4ed5\u7d44\u307f\u3067\u6291\u5236\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3057\u305f\u3002\u3053\u306e\u65b9\u6cd5\u306f\u7af6\u5408\u95a2\u4fc2\u306b\u3042\u308bChainguard\u793e\u306b\u3088\u308b\u6279\u5224\u3092\u53d7\u3051\u3066\u3044\u308b\u3068\u3044\u3046\u3053\u3068\u3082\u898b\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p>\u7b46\u8005\u306f\u4e8b\u524d\u306b<a href=\"https:\/\/www.creationline.com\/tech-blog\/84505\" target=\"_blank\" rel=\"noreferrer noopener\">Chainguard\u3092\u691c\u8a3c<\/a>\u3057\u3066\u3044\u305f\u305f\u3081\u3001CVE\u691c\u77e5\u6570\u306b\u3064\u3044\u3066\u591a\u5c11\u30d0\u30a4\u30a2\u30b9\u304c\u304b\u304b\u3063\u305f\u7269\u3082\u898b\u65b9\u3092\u3057\u3066\u3057\u307e\u3063\u3066\u3044\u307e\u3059\u3002\u305f\u3060\u3001\u4eca\u56de\u78ba\u8a8d\u3057\u305f <a href=\"https:\/\/hub.docker.com\/hardened-images\/catalog\/dhi\/python\/images\" target=\"_blank\" rel=\"noreferrer noopener\">dhi.io\/python:3.14.6-debian13<\/a>\u306f\u3001\u300c\u516c\u5f0f\u30a4\u30e1\u30fc\u30b8\u300d\u306e<a href=\"https:\/\/hub.docker.com\/layers\/library\/python\/3.14.6-slim-trixie\" target=\"_blank\" rel=\"noreferrer noopener\">python:3.14.6-slim-trixie<\/a>\u3068\u7570\u306a\u308a\u30b7\u30a7\u30eb\u304c\u5165\u3063\u3066\u3044\u307e\u305b\u3093\u3057\u3001\u4fb5\u5165\u306b\u5bfe\u3059\u308b\u5805\u7262\u6027\u304c\u9ad8\u3081\u3089\u308c\u3066\u3044\u308b\u3053\u3068\u306f\u4e8b\u5b9f\u3067\u3059\u3002\u672c\u97f3\u3092\u8a00\u3046\u3068\u958b\u767a\u30d1\u30c3\u30b1\u30fc\u30b8\u3059\u3089\u542b\u3093\u3067\u3044\u306a\u3044\u7248\u3082\u3042\u308b\u306a\u3089\u3088\u308a\u826f\u304b\u3063\u305f\u306e\u3067\u3059\u304c\u2026\u3002\u3053\u306e\u3088\u3046\u306a\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u53d6\u6368\u9078\u629e\u306fCVE\u306e\u3088\u3046\u306a\u6307\u6a19\u3067\u4e00\u5f8b\u306b\u5224\u65ad\u3067\u304d\u308b\u3082\u306e\u3067\u306f\u306a\u3044\u305f\u3081\u3001\u691c\u8a0e\u304c\u3088\u308a\u96e3\u3057\u3044\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u4e00\u65b9\u3067DHI\u306f\u6700\u95775\u5e74\u30a4\u30e1\u30fc\u30b8\u306e\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u3092\u884c\u3046\u3053\u3068\u3092\u8868\u660e\u3057\u3066\u304a\u308a\u3001\u7121\u6599\u30d7\u30e9\u30f3\u3067\u3082\u30d0\u30fc\u30b8\u30e7\u30f3\u30bf\u30b0\u3092\u5229\u7528\u3057\u3066\u30a4\u30e1\u30fc\u30b8\u3092\u5229\u7528\u53ef\u80fd\u3067\u3059\uff08Chainguard\u306e\u7121\u6599\u30d7\u30e9\u30f3\u3067\u306f <code>:latest<\/code> \u306e\u307f\uff09\u3002<\/p>\n\n\n\n<p>\u672c\u7a3f\u304c\u5805\u7262\u306a\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u306e\u691c\u8a0e\u306e\u4e00\u52a9\u3068\u306a\u308c\u3070\u5e78\u3044\u3067\u3059\u3002<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u306f\u3058\u3081\u306b 2025\u5e745\u6708\u3001Docker\u793e\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5b89\u5168\u306a\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3067\u3042\u308bDocker Hardened Image\u3092\u767a\u8868\u3057\u307e\u3057\u305f\u3002\u5f93\u6765\u304b\u3089Docker Hub\u3067\u306fDocker\u793e\u304c\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u3057\u3066\u3044\u308b\u300c\u516c\u5f0f\u30a4\u30e1\u30fc [&#8230;]<\/p>\n","protected":false},"author":2,"featured_media":84804,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[31,67,43],"tags":[],"class_list":["post-84803","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-higuchi","category-devops","category-docker"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Docker Hardened Image (DHI) \u3092CVE\u306e\u89b3\u70b9\u3067\u78ba\u8a8d\u3057\u3066\u307f\u305f #docker #security - Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3<\/title>\n<meta name=\"description\" content=\"d-higuchi, DevOps, Docker |\u306f\u3058\u3081\u306b 2025\u5e745\u6708\u3001Docker\u793e\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5b89\u5168\u306a\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3067\u3042\u308bDocker Hardened\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803\" \/>\n<meta property=\"og:locale\" content=\"ja_JP\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Docker Hardened Image (DHI) \u3092CVE\u306e\u89b3\u70b9\u3067\u78ba\u8a8d\u3057\u3066\u307f\u305f #docker #security - Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3\" \/>\n<meta property=\"og:description\" content=\"d-higuchi, DevOps, Docker |\u306f\u3058\u3081\u306b 2025\u5e745\u6708\u3001Docker\u793e\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5b89\u5168\u306a\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3067\u3042\u308bDocker Hardened\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803\" \/>\n<meta property=\"og:site_name\" content=\"Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/creationline\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-15T07:30:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-16T02:18:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2026\/07\/dhi.png\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Daisuke Higuchi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@creationline\" \/>\n<meta name=\"twitter:site\" content=\"@creationline\" \/>\n<meta name=\"twitter:label1\" content=\"\u57f7\u7b46\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"Daisuke Higuchi\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u63a8\u5b9a\u8aad\u307f\u53d6\u308a\u6642\u9593\" \/>\n\t<meta name=\"twitter:data2\" content=\"4\u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\\\/84803#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\\\/84803\"},\"author\":{\"name\":\"Daisuke Higuchi\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/#\\\/schema\\\/person\\\/16f1373831fb6fd17387f16ae1195206\"},\"headline\":\"Docker Hardened Image (DHI) \u3092CVE\u306e\u89b3\u70b9\u3067\u78ba\u8a8d\u3057\u3066\u307f\u305f #docker #security\",\"datePublished\":\"2026-07-15T07:30:00+00:00\",\"dateModified\":\"2026-07-16T02:18:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\\\/84803\"},\"wordCount\":139,\"image\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\\\/84803#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/dhi.png\",\"articleSection\":[\"d-higuchi\",\"DevOps\",\"Docker\"],\"inLanguage\":\"ja\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\\\/84803\",\"url\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\\\/84803\",\"name\":\"Docker Hardened Image (DHI) \u3092CVE\u306e\u89b3\u70b9\u3067\u78ba\u8a8d\u3057\u3066\u307f\u305f #docker #security - Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\\\/84803#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\\\/84803#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/dhi.png\",\"datePublished\":\"2026-07-15T07:30:00+00:00\",\"dateModified\":\"2026-07-16T02:18:30+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/#\\\/schema\\\/person\\\/16f1373831fb6fd17387f16ae1195206\"},\"description\":\"d-higuchi, DevOps, Docker |\u306f\u3058\u3081\u306b 2025\u5e745\u6708\u3001Docker\u793e\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5b89\u5168\u306a\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3067\u3042\u308bDocker Hardened\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\\\/84803#breadcrumb\"},\"inLanguage\":\"ja\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\\\/84803\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ja\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\\\/84803#primaryimage\",\"url\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/dhi.png\",\"contentUrl\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/dhi.png\",\"width\":600,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\\\/84803#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"HOME\",\"item\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u30af\u30e9\u30a6\u30c9\u30cd\u30a4\u30c6\u30a3\u30d6\",\"item\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Docker\",\"item\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/docker\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Docker Hardened Image (DHI) \u3092CVE\u306e\u89b3\u70b9\u3067\u78ba\u8a8d\u3057\u3066\u307f\u305f #docker #security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/#website\",\"url\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/\",\"name\":\"Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3\",\"description\":\"\u30a2\u30b8\u30e3\u30a4\u30eb\uff06DevOps\u3001\u30af\u30e9\u30a6\u30c9\u30cd\u30a4\u30c6\u30a3\u30d6\u3001AI\uff06LLM\u306e\u5148\u7aef\u6280\u8853\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ja\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/#\\\/schema\\\/person\\\/16f1373831fb6fd17387f16ae1195206\",\"name\":\"Daisuke Higuchi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ja\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/pngout-25-230x230.png\",\"url\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/pngout-25-230x230.png\",\"contentUrl\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/pngout-25-230x230.png\",\"caption\":\"Daisuke Higuchi\"},\"description\":\"\u306f\u3084\u308a\u306e\u6280\u8853\u8981\u7d20\u306b\u52a0\u3048\u3066\u3001\u4f1a\u8b70\u306e\u9032\u3081\u65b9\u30fb\u6587\u7ae0\u306e\u66f8\u304d\u65b9\u306a\u3069\u306e\u696d\u52d9\u6539\u5584\u306b\u3082\u53d6\u308a\u7d44\u3093\u3067\u3044\u307e\u3059\u3002\u300cChef\u6d3b\u7528\u30ac\u30a4\u30c9\u300d\u5171\u8457\u306e\u307b\u304b\u3001Debian Official Developer\u3082\u3084\u3063\u3066\u3044\u307e\u3059\u3002\",\"url\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/author\\\/higuchi\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Docker Hardened Image (DHI) \u3092CVE\u306e\u89b3\u70b9\u3067\u78ba\u8a8d\u3057\u3066\u307f\u305f #docker #security - Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3","description":"d-higuchi, DevOps, Docker |\u306f\u3058\u3081\u306b 2025\u5e745\u6708\u3001Docker\u793e\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5b89\u5168\u306a\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3067\u3042\u308bDocker Hardened","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803","og_locale":"ja_JP","og_type":"article","og_title":"Docker Hardened Image (DHI) \u3092CVE\u306e\u89b3\u70b9\u3067\u78ba\u8a8d\u3057\u3066\u307f\u305f #docker #security - Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3","og_description":"d-higuchi, DevOps, Docker |\u306f\u3058\u3081\u306b 2025\u5e745\u6708\u3001Docker\u793e\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5b89\u5168\u306a\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3067\u3042\u308bDocker Hardened","og_url":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803","og_site_name":"Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3","article_publisher":"https:\/\/www.facebook.com\/creationline","article_published_time":"2026-07-15T07:30:00+00:00","article_modified_time":"2026-07-16T02:18:30+00:00","og_image":[{"width":600,"height":600,"url":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2026\/07\/dhi.png","type":"image\/png"}],"author":"Daisuke Higuchi","twitter_card":"summary_large_image","twitter_creator":"@creationline","twitter_site":"@creationline","twitter_misc":{"\u57f7\u7b46\u8005":"Daisuke Higuchi","\u63a8\u5b9a\u8aad\u307f\u53d6\u308a\u6642\u9593":"4\u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803#article","isPartOf":{"@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803"},"author":{"name":"Daisuke Higuchi","@id":"https:\/\/www.creationline.com\/tech-blog\/#\/schema\/person\/16f1373831fb6fd17387f16ae1195206"},"headline":"Docker Hardened Image (DHI) \u3092CVE\u306e\u89b3\u70b9\u3067\u78ba\u8a8d\u3057\u3066\u307f\u305f #docker #security","datePublished":"2026-07-15T07:30:00+00:00","dateModified":"2026-07-16T02:18:30+00:00","mainEntityOfPage":{"@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803"},"wordCount":139,"image":{"@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803#primaryimage"},"thumbnailUrl":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2026\/07\/dhi.png","articleSection":["d-higuchi","DevOps","Docker"],"inLanguage":"ja"},{"@type":"WebPage","@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803","url":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803","name":"Docker Hardened Image (DHI) \u3092CVE\u306e\u89b3\u70b9\u3067\u78ba\u8a8d\u3057\u3066\u307f\u305f #docker #security - Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3","isPartOf":{"@id":"https:\/\/www.creationline.com\/tech-blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803#primaryimage"},"image":{"@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803#primaryimage"},"thumbnailUrl":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2026\/07\/dhi.png","datePublished":"2026-07-15T07:30:00+00:00","dateModified":"2026-07-16T02:18:30+00:00","author":{"@id":"https:\/\/www.creationline.com\/tech-blog\/#\/schema\/person\/16f1373831fb6fd17387f16ae1195206"},"description":"d-higuchi, DevOps, Docker |\u306f\u3058\u3081\u306b 2025\u5e745\u6708\u3001Docker\u793e\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5b89\u5168\u306a\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3067\u3042\u308bDocker Hardened","breadcrumb":{"@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803#breadcrumb"},"inLanguage":"ja","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803"]}]},{"@type":"ImageObject","inLanguage":"ja","@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803#primaryimage","url":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2026\/07\/dhi.png","contentUrl":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2026\/07\/dhi.png","width":600,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker\/84803#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"HOME","item":"https:\/\/www.creationline.com\/tech-blog"},{"@type":"ListItem","position":2,"name":"\u30af\u30e9\u30a6\u30c9\u30cd\u30a4\u30c6\u30a3\u30d6","item":"https:\/\/www.creationline.com\/tech-blog\/cloudnative"},{"@type":"ListItem","position":3,"name":"Docker","item":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/docker"},{"@type":"ListItem","position":4,"name":"Docker Hardened Image (DHI) \u3092CVE\u306e\u89b3\u70b9\u3067\u78ba\u8a8d\u3057\u3066\u307f\u305f #docker #security"}]},{"@type":"WebSite","@id":"https:\/\/www.creationline.com\/tech-blog\/#website","url":"https:\/\/www.creationline.com\/tech-blog\/","name":"Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3","description":"\u30a2\u30b8\u30e3\u30a4\u30eb\uff06DevOps\u3001\u30af\u30e9\u30a6\u30c9\u30cd\u30a4\u30c6\u30a3\u30d6\u3001AI\uff06LLM\u306e\u5148\u7aef\u6280\u8853","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.creationline.com\/tech-blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ja"},{"@type":"Person","@id":"https:\/\/www.creationline.com\/tech-blog\/#\/schema\/person\/16f1373831fb6fd17387f16ae1195206","name":"Daisuke Higuchi","image":{"@type":"ImageObject","inLanguage":"ja","@id":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2026\/05\/pngout-25-230x230.png","url":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2026\/05\/pngout-25-230x230.png","contentUrl":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2026\/05\/pngout-25-230x230.png","caption":"Daisuke Higuchi"},"description":"\u306f\u3084\u308a\u306e\u6280\u8853\u8981\u7d20\u306b\u52a0\u3048\u3066\u3001\u4f1a\u8b70\u306e\u9032\u3081\u65b9\u30fb\u6587\u7ae0\u306e\u66f8\u304d\u65b9\u306a\u3069\u306e\u696d\u52d9\u6539\u5584\u306b\u3082\u53d6\u308a\u7d44\u3093\u3067\u3044\u307e\u3059\u3002\u300cChef\u6d3b\u7528\u30ac\u30a4\u30c9\u300d\u5171\u8457\u306e\u307b\u304b\u3001Debian Official Developer\u3082\u3084\u3063\u3066\u3044\u307e\u3059\u3002","url":"https:\/\/www.creationline.com\/tech-blog\/author\/higuchi"}]}},"_links":{"self":[{"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/posts\/84803","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/comments?post=84803"}],"version-history":[{"count":3,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/posts\/84803\/revisions"}],"predecessor-version":[{"id":84809,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/posts\/84803\/revisions\/84809"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/media\/84804"}],"wp:attachment":[{"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/media?parent=84803"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/categories?post=84803"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/tags?post=84803"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}