[ { "filename": "/tekton/home/tpa-report-amd64.json", "namespace": "required_checks", "successes": 5, "warnings": [ { "msg": "Found 3 high vulnerabilities.", "metadata": { "details": { "description": "Source: redhat-csaf. Affected dependencies: pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/openssl-libs@3.2.2-6.el9_5.1?arch=x86_64\u0026distro=rhel-9.6\u0026epoch=1\u0026upstream=openssl-3.2.2-6.el9_5.1.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/openssl-libs@3.2.2-6.el9_5.1?arch=x86_64\u0026distro=rhel-9.6\u0026epoch=1\u0026upstream=openssl-3.2.2-6.el9_5.1.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/microdnf@3.9.1-3.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=microdnf-3.9.1-3.el9.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/microdnf@3.9.1-3.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=microdnf-3.9.1-3.el9.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/systemd-libs@252-51.el9_6.2?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=systemd-252-51.el9_6.2.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/systemd-libs@252-51.el9_6.2?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=systemd-252-51.el9_6.2.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libblkid@2.37.4-21.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=util-linux-2.37.4-21.el9.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libblkid@2.37.4-21.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=util-linux-2.37.4-21.el9.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/cyrus-sasl-lib@2.1.27-21.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=cyrus-sasl-2.1.27-21.el9.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/cyrus-sasl-lib@2.1.27-21.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=cyrus-sasl-2.1.27-21.el9.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libusbx@1.0.26-1.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=libusbx-1.0.26-1.el9.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libusbx@1.0.26-1.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=libusbx-1.0.26-1.el9.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libsemanage@3.6-5.el9_6?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=libsemanage-3.6-5.el9_6.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libsemanage@3.6-5.el9_6?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=libsemanage-3.6-5.el9_6.src.rpm] (CVE-2026-86145, CVE-2026-103111, CVE-2026-89161)", "name": "rhtpa_high_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 3 } }, { "msg": "Found 2 medium vulnerabilities.", "metadata": { "details": { "description": "Source: redhat-csaf. Affected dependencies: pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/openssl-libs@3.2.2-6.el9_5.1?arch=x86_64\u0026distro=rhel-9.6\u0026epoch=1\u0026upstream=openssl-3.2.2-6.el9_5.1.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/openssl-libs@3.2.2-6.el9_5.1?arch=x86_64\u0026distro=rhel-9.6\u0026epoch=1\u0026upstream=openssl-3.2.2-6.el9_5.1.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/microdnf@3.9.1-3.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=microdnf-3.9.1-3.el9.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/microdnf@3.9.1-3.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=microdnf-3.9.1-3.el9.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/systemd-libs@252-51.el9_6.2?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=systemd-252-51.el9_6.2.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/systemd-libs@252-51.el9_6.2?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=systemd-252-51.el9_6.2.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libblkid@2.37.4-21.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=util-linux-2.37.4-21.el9.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libblkid@2.37.4-21.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=util-linux-2.37.4-21.el9.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/cyrus-sasl-lib@2.1.27-21.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=cyrus-sasl-2.1.27-21.el9.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/cyrus-sasl-lib@2.1.27-21.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=cyrus-sasl-2.1.27-21.el9.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libusbx@1.0.26-1.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=libusbx-1.0.26-1.el9.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libusbx@1.0.26-1.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=libusbx-1.0.26-1.el9.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libsemanage@3.6-5.el9_6?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=libsemanage-3.6-5.el9_6.src.rpm] (CVE-2026-89158, CVE-2026-89157), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libsemanage@3.6-5.el9_6?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=libsemanage-3.6-5.el9_6.src.rpm] (CVE-2026-89158, CVE-2026-89157)", "name": "rhtpa_medium_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 2 } }, { "msg": "Found 3 low vulnerabilities.", "metadata": { "details": { "description": "Source: redhat-csaf. Affected dependencies: pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/openssl-libs@3.2.2-6.el9_5.1?arch=x86_64\u0026distro=rhel-9.6\u0026epoch=1\u0026upstream=openssl-3.2.2-6.el9_5.1.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/openssl-libs@3.2.2-6.el9_5.1?arch=x86_64\u0026distro=rhel-9.6\u0026epoch=1\u0026upstream=openssl-3.2.2-6.el9_5.1.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/microdnf@3.9.1-3.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=microdnf-3.9.1-3.el9.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/microdnf@3.9.1-3.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=microdnf-3.9.1-3.el9.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/systemd-libs@252-51.el9_6.2?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=systemd-252-51.el9_6.2.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/systemd-libs@252-51.el9_6.2?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=systemd-252-51.el9_6.2.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libblkid@2.37.4-21.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=util-linux-2.37.4-21.el9.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libblkid@2.37.4-21.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=util-linux-2.37.4-21.el9.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/cyrus-sasl-lib@2.1.27-21.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=cyrus-sasl-2.1.27-21.el9.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/cyrus-sasl-lib@2.1.27-21.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=cyrus-sasl-2.1.27-21.el9.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libusbx@1.0.26-1.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=libusbx-1.0.26-1.el9.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libusbx@1.0.26-1.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=libusbx-1.0.26-1.el9.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libsemanage@3.6-5.el9_6?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=libsemanage-3.6-5.el9_6.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162), pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch\u0026distro=rhel-9.6\u0026upstream=pcre2-10.40-6.el9.src.rpm [transitive via pkg:rpm/redhat/libsemanage@3.6-5.el9_6?arch=x86_64\u0026distro=rhel-9.6\u0026upstream=libsemanage-3.6-5.el9_6.src.rpm] (CVE-2026-89160, CVE-2026-89156, CVE-2026-89162)", "name": "rhtpa_low_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 3 } } ] } ] {"vulnerabilities":{"critical":0,"high":3,"medium":2,"low":3,"unknown":0},"unpatched_vulnerabilities":{"critical":0,"high":0,"medium":0,"low":0,"unknown":0}} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-orou/gh-multi-component-parent-qxpq:93fd119f96bea2290b6c74a97efb7d89c62c794a", "digests": ["sha256:1cc574509cb519eb1432f0988daa5c9504aec9453dd5a04be9a1808d476079a9"]}} {"result":"SUCCESS","timestamp":"2026-10-12T06:50:41+00:00","note":"Task tpa-scan completed: Refer to Tekton task result SCAN_OUTPUT for vulnerabilities scanned by TPA.","namespace":"default","successes":0,"failures":0,"warnings":0}