[ { "filename": "/tekton/home/clair-result-amd64.json", "namespace": "required_checks", "successes": 6, "warnings": [ { "msg": "Found packages with critical vulnerabilities associated with RHSA fixes. Consider updating to a newer version of those packages, they may no longer be affected by the reported CVEs.", "metadata": { "details": { "description": "Vulnerabilities found: org.bouncycastle:bcprov-jdk18on-1.78 (GHSA-574f-3g2m-x479)", "name": "clair_critical_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 1 } }, { "msg": "Found packages with high vulnerabilities associated with RHSA fixes. Consider updating to a newer version of those packages, they may no longer be affected by the reported CVEs.", "metadata": { "details": { "description": "Vulnerabilities found: com.fasterxml.jackson.core:jackson-databind-2.18.1 (GHSA-rmj7-2vxq-3g9f)", "name": "clair_high_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 1 } }, { "msg": "Found packages with unpatched medium vulnerabilities. These vulnerabilities don't have a known fix at this time.", "metadata": { "details": { "description": "Vulnerabilities found: libmount1-2.34-0.1ubuntu9.1 (CVE-2025-14104 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-13595 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-27456 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53612 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53613 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53614 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53615 on Ubuntu 20.04 LTS (focal) - medium), perl-base-5.30.0-9ubuntu0.2 (CVE-2011-10043 on Ubuntu 20.04 LTS (focal) - medium, CVE-2017-20230 on Ubuntu 20.04 LTS (focal) - medium, CVE-2023-31486 on Ubuntu 20.04 LTS (focal) - medium, CVE-2025-15649 on Ubuntu 20.04 LTS (focal) - medium, CVE-2025-40909 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-12087 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-13221 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-15534 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-19487 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-3381 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-4176 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-42497 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-48959 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-48961 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-48962 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-57432 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-57433 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-7017 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-9538 on Ubuntu 20.04 LTS (focal) - medium), libc6-2.31-0ubuntu9.2 (CVE-2026-4046 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-5435 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-5450 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-5928 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-6238 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-6368 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-6791 on Ubuntu 20.04 LTS (focal) - medium), libsystemd0-245.4-4ubuntu3.13 (CVE-2026-40226 on Ubuntu 20.04 LTS (focal) - medium), wget-1.20.3-1ubuntu1 (CVE-2021-31879 on Ubuntu 20.04 LTS (focal) - medium), libudev1-245.4-4ubuntu3.13 (CVE-2026-40226 on Ubuntu 20.04 LTS (focal) - medium), openssl-1.1.1f-1ubuntu2.8 (CVE-2026-14456 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-54876 on Ubuntu 20.04 LTS (focal) - medium), mount-2.34-0.1ubuntu9.1 (CVE-2025-14104 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-13595 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-27456 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53612 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53613 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53614 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53615 on Ubuntu 20.04 LTS (focal) - medium), fdisk-2.34-0.1ubuntu9.1 (CVE-2025-14104 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-13595 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-27456 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53612 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53613 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53614 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53615 on Ubuntu 20.04 LTS (focal) - medium), util-linux-2.34-0.1ubuntu9.1 (CVE-2025-14104 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-13595 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-27456 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53612 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53613 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53614 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53615 on Ubuntu 20.04 LTS (focal) - medium), libblkid1-2.34-0.1ubuntu9.1 (CVE-2025-14104 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-13595 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-27456 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53612 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53613 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53614 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53615 on Ubuntu 20.04 LTS (focal) - medium), libuuid1-2.34-0.1ubuntu9.1 (CVE-2025-14104 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-13595 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-27456 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53612 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53613 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53614 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53615 on Ubuntu 20.04 LTS (focal) - medium), libssl1.1-1.1.1f-1ubuntu2.8 (CVE-2026-14456 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-54876 on Ubuntu 20.04 LTS (focal) - medium), libc-bin-2.31-0ubuntu9.2 (CVE-2026-4046 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-5435 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-5450 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-5928 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-6238 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-6368 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-6791 on Ubuntu 20.04 LTS (focal) - medium), libfdisk1-2.34-0.1ubuntu9.1 (CVE-2025-14104 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-13595 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-27456 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53612 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53613 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53614 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53615 on Ubuntu 20.04 LTS (focal) - medium), libsmartcols1-2.34-0.1ubuntu9.1 (CVE-2025-14104 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-13595 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-27456 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53612 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53613 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53614 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53615 on Ubuntu 20.04 LTS (focal) - medium), tar-1.30+dfsg-7ubuntu0.20.04.1 (CVE-2025-45582 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-18477 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-18508 on Ubuntu 20.04 LTS (focal) - medium), bsdutils-1:2.34-0.1ubuntu9.1 (CVE-2025-14104 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-13595 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-27456 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53612 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53613 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53614 on Ubuntu 20.04 LTS (focal) - medium, CVE-2026-53615 on Ubuntu 20.04 LTS (focal) - medium)", "name": "clair_unpatched_medium_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 106 } }, { "msg": "Found packages with unpatched low/negligible vulnerabilities. These vulnerabilities don't have a known fix at this time.", "metadata": { "details": { "description": "Vulnerabilities found: libncurses6-6.2-0ubuntu2 (CVE-2023-50495 on Ubuntu 20.04 LTS (focal) - low, CVE-2025-6141 on Ubuntu 20.04 LTS (focal) - low), libc6-2.31-0ubuntu9.2 (CVE-2019-1010022 on Ubuntu 20.04 LTS (focal) - low, CVE-2019-1010023 on Ubuntu 20.04 LTS (focal) - low, CVE-2019-1010024 on Ubuntu 20.04 LTS (focal) - low, CVE-2021-33574 on Ubuntu 20.04 LTS (focal) - low), ncurses-base-6.2-0ubuntu2 (CVE-2023-50495 on Ubuntu 20.04 LTS (focal) - low, CVE-2025-6141 on Ubuntu 20.04 LTS (focal) - low), libsystemd0-245.4-4ubuntu3.13 (CVE-2020-13776 on Ubuntu 20.04 LTS (focal) - low, CVE-2023-26604 on Ubuntu 20.04 LTS (focal) - low, CVE-2023-7008 on Ubuntu 20.04 LTS (focal) - low, CVE-2026-40228 on Ubuntu 20.04 LTS (focal) - low), ncurses-bin-6.2-0ubuntu2 (CVE-2023-50495 on Ubuntu 20.04 LTS (focal) - low, CVE-2025-6141 on Ubuntu 20.04 LTS (focal) - low), wget-1.20.3-1ubuntu1 (CVE-2024-10524 on Ubuntu 20.04 LTS (focal) - low), libudev1-245.4-4ubuntu3.13 (CVE-2020-13776 on Ubuntu 20.04 LTS (focal) - low, CVE-2023-26604 on Ubuntu 20.04 LTS (focal) - low, CVE-2023-7008 on Ubuntu 20.04 LTS (focal) - low, CVE-2026-40228 on Ubuntu 20.04 LTS (focal) - low), libc-bin-2.31-0ubuntu9.2 (CVE-2019-1010022 on Ubuntu 20.04 LTS (focal) - low, CVE-2019-1010023 on Ubuntu 20.04 LTS (focal) - low, CVE-2019-1010024 on Ubuntu 20.04 LTS (focal) - low, CVE-2021-33574 on Ubuntu 20.04 LTS (focal) - low), gpgv-2.2.19-3ubuntu2.1 (CVE-2022-3219 on Ubuntu 20.04 LTS (focal) - low, CVE-2026-57062 on Ubuntu 20.04 LTS (focal) - low), libncursesw6-6.2-0ubuntu2 (CVE-2023-50495 on Ubuntu 20.04 LTS (focal) - low, CVE-2025-6141 on Ubuntu 20.04 LTS (focal) - low), libtinfo6-6.2-0ubuntu2 (CVE-2023-50495 on Ubuntu 20.04 LTS (focal) - low, CVE-2025-6141 on Ubuntu 20.04 LTS (focal) - low), perl-base-5.30.0-9ubuntu0.2 (CVE-2023-47039 on Ubuntu 20.04 LTS (focal) - negligible), libc6-2.31-0ubuntu9.2 (CVE-2016-20013 on Ubuntu 20.04 LTS (focal) - negligible, CVE-2018-20796 on Ubuntu 20.04 LTS (focal) - negligible), libc-bin-2.31-0ubuntu9.2 (CVE-2016-20013 on Ubuntu 20.04 LTS (focal) - negligible, CVE-2018-20796 on Ubuntu 20.04 LTS (focal) - negligible)", "name": "clair_unpatched_low_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 34 } } ] } ] {"vulnerabilities":{"critical":1,"high":1,"medium":0,"low":0,"unknown":0},"unpatched_vulnerabilities":{"critical":0,"high":0,"medium":106,"low":34,"unknown":0}} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-prefetch-generic/component-prefetch-generic:on-pr-ebfcaa8924ba1e7f036b2611b3a2ae990d1eda15", "digests": ["sha256:704bb309fc01bc8e7a5e2566a2507de31c682ea15a627cd3c99c9363b4bf0b0a"]}} {"result":"SUCCESS","timestamp":"2026-08-18T04:50:38+00:00","note":"Task clair-scan completed: Refer to Tekton task result SCAN_OUTPUT for vulnerabilities scanned by Clair.","namespace":"default","successes":0,"failures":0,"warnings":0}