docker.io/datadog/agent:7.80.4
Base OS: ubuntu 24.0441 vulnerabilities fixed
Patched Image
ghcr.io/verity-org/datadog/agent:7.80.4
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/datadog/agent:7.80.4
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/datadog/agent:7.80.4 \ --owner verity-org
Before patching
Found 72 vulnerabilities in the original image. 41 fixed by Copa. 31 remaining after patching.
14 HIGH39 MEDIUM15 LOW4 UNKNOWN
Awaiting upstream fix
No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.
- CVE-2026-27456MEDIUM
- Package
- bsdutils
- Installed
- 1:2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libblkid1
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-4046MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4437MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4438MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-5435MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-6238MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4046MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4437MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4438MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-5435MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-6238MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libmount1
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-13757MEDIUM
- Package
- libp11-kit0
- Installed
- 0.25.3-4ubuntu2.1
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libsmartcols1
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libuuid1
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-27456MEDIUM
- Package
- mount
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-27456MEDIUM
- Package
- util-linux
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2025-29481LOW
- Package
- libbpf1
- Installed
- 1:1.3.0-2build2
- Fixed
- CVE-2025-1352LOW
- Package
- libelf1t64
- Installed
- 0.190-1.1ubuntu0.1
- Fixed
- CVE-2025-1376LOW
- Package
- libelf1t64
- Installed
- 0.190-1.1ubuntu0.1
- Fixed
- CVE-2024-2236LOW
- Package
- libgcrypt20
- Installed
- 1.10.3-2ubuntu0.1
- Fixed
- CVE-2026-40228LOW
- Package
- libsystemd0
- Installed
- 255.4-1ubuntu8.16
- Fixed
- CVE-2026-40228LOW
- Package
- libudev1
- Installed
- 255.4-1ubuntu8.16
- Fixed
- CVE-2024-56433LOW
- Package
- login
- Installed
- 1:4.13+dfsg1-4ubuntu3.2
- Fixed
- CVE-2024-56433LOW
- Package
- passwd
- Installed
- 1:4.13+dfsg1-4ubuntu3.2
- Fixed
- CVE-2026-27171LOW
- Package
- zlib1g
- Installed
- 1:1.3.dfsg-3.1ubuntu2.1
- Fixed
- CVE-2026-44405LOW
- Package
- paramiko
- Installed
- 4.0.0
- Fixed
- GO-2026-5932UNKNOWN
- Package
- golang.org/x/crypto
- Installed
- v0.52.0
- Fixed
- GO-2026-5932UNKNOWN
- Package
- golang.org/x/crypto
- Installed
- v0.52.0
- Fixed
- GO-2026-5932UNKNOWN
- Package
- golang.org/x/crypto
- Installed
- v0.52.0
- Fixed
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-27456 | bsdutils | 1:2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-27456 | libblkid1 | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-4046 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4437 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4438 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-5435 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-6238 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4046 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4437 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4438 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-5435 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-6238 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-27456 | libmount1 | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-13757 | libp11-kit0 | 0.25.3-4ubuntu2.1 | MEDIUM | |
| CVE-2026-27456 | libsmartcols1 | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-27456 | libuuid1 | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-27456 | mount | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-27456 | util-linux | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2025-29481 | libbpf1 | 1:1.3.0-2build2 | LOW | |
| CVE-2025-1352 | libelf1t64 | 0.190-1.1ubuntu0.1 | LOW | |
| CVE-2025-1376 | libelf1t64 | 0.190-1.1ubuntu0.1 | LOW | |
| CVE-2024-2236 | libgcrypt20 | 1.10.3-2ubuntu0.1 | LOW | |
| CVE-2026-40228 | libsystemd0 | 255.4-1ubuntu8.16 | LOW | |
| CVE-2026-40228 | libudev1 | 255.4-1ubuntu8.16 | LOW | |
| CVE-2024-56433 | login | 1:4.13+dfsg1-4ubuntu3.2 | LOW | |
| CVE-2024-56433 | passwd | 1:4.13+dfsg1-4ubuntu3.2 | LOW | |
| CVE-2026-27171 | zlib1g | 1:1.3.dfsg-3.1ubuntu2.1 | LOW | |
| CVE-2026-44405 | paramiko | 4.0.0 | LOW | |
| GO-2026-5932 | golang.org/x/crypto | v0.52.0 | UNKNOWN | |
| GO-2026-5932 | golang.org/x/crypto | v0.52.0 | UNKNOWN | |
| GO-2026-5932 | golang.org/x/crypto | v0.52.0 | UNKNOWN |
Original image reference
docker.io/datadog/agent:7.80.4