CLSA-2026-1773706632 TuxCare security update for tar (5 CVEs)

🗓️ 04 Aug 2026 14:52:13Reported by GoogleType

osv🔗 osv.dev👁 4 Views

TuxCare rebuilt tar to fix four vulnerabilities; version 1.0.3-tuxcare.2 released.

Reporter	Title	Published	Views	Family All 415
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.	31 Mar 202613:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components	28 Mar 202415:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	17 Mar 202603:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses node-tar which is vulnerable to CVE-2026-23745	20 Mar 202611:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tar-7.5.7.tgz	28 Apr 202622:25	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway	2 Feb 202614:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in affects IBM watsonx Orchestrate with watsonx Assistant Cartridge	23 Mar 202619:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tar-6.2.1.tgz	13 Apr 202613:07	–	ibm
IBM Security Bulletins	Security Bulletin: Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	14 Jul 202612:55	–	ibm

24 Aug 2026 13:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 25

CVSS 35.3

CVSS 3.17.1 - 8.8

CVSS 48.2

EPSS0.02658

SSVC