CLSA-2025-1762906009 TuxCare security update for ch.qos.logback (4 CVEs)

🗓️ 04 Aug 2026 14:52:06Reported by GoogleType

osv🔗 osv.dev👁 12 Views

TuxCare fixes four vulnerabilities in ch.qos.logback with version 1.1.7-tuxcare.1 by rebuilding six packages.

Reporter	Title	Published	Views	Family All 1001
Wolfi	CVE-2025-11226 vulnerabilities	22 Oct 202513:47	–	wolfi
Wolfi	CVE-2023-6378 vulnerabilities	29 Nov 202312:15	–	wolfi
Wolfi	CVE-2024-12801 vulnerabilities	19 Dec 202417:15	–	wolfi
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains a vulnerability related to use os qOS.ch Logback-core	16 Apr 202614:40	–	ibm
IBM Security Bulletins	Security Bulletin: A logback-core-1.5.18.jar vulnerability found by Scanner affects IBM Rational Functional Tester / DevOps Test UI	25 May 202616:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses logback-core which is vulnerable to CVE-2025-11226	10 Feb 202610:13	–	ibm
IBM Security Bulletins	Security Bulletin: SSRF Vulnerability in QOS.CH Logback via Malicious DOCTYPE in XML Config (v0.1–1.3.14, 1.4.0–1.5.12)	23 Jul 202510:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	6 Feb 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Asset Data Dictionary uses multiple third party dependencies which is vulnerable to CVEs.	6 Feb 202505:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities	24 Apr 202415:52	–	ibm

07 Aug 2026 10:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 27.5

CVSS 3.17.1 - 9.8

CVSS 47

EPSS0.07501

SSVC