CLSA-2025-1762906009 TuxCare security update for ch.qos.logback (4 CVEs)

🗓️ 04 Aug 2026 14:52:06Reported by GoogleType

osv🔗 osv.dev👁 5 Views

TuxCare fixes four vulnerabilities in ch.qos.logback with version 1.1.7-tuxcare.1 by rebuilding six packages.

Reporter	Title	Published	Views	Family All 332
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains a vulnerability related to use os qOS.ch Logback-core	16 Apr 202614:40	–	ibm
IBM Security Bulletins	Security Bulletin: A logback-core-1.5.18.jar vulnerability found by Scanner affects IBM Rational Functional Tester / DevOps Test UI	25 May 202616:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses logback-core which is vulnerable to CVE-2025-11226	10 Feb 202610:13	–	ibm
IBM Security Bulletins	Security Bulletin: SSRF Vulnerability in QOS.CH Logback via Malicious DOCTYPE in XML Config (v0.1–1.3.14, 1.4.0–1.5.12)	23 Jul 202510:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	6 Feb 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Asset Data Dictionary uses multiple third party dependencies which is vulnerable to CVEs.	6 Feb 202505:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities	24 Apr 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2023-6378	12 Jul 202405:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition (ITNM).	29 May 202515:46	–	ibm
IBM Security Bulletins	Security Bulletin: Netty Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2021-21295)	16 Jan 202608:37	–	ibm

07 Aug 2026 10:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 27.5

CVSS 3.17.1 - 9.8

CVSS 47

EPSS0.07501

SSVC