CLSA-2026-1775176111 TuxCare security update for tar (2 CVEs)

🗓️ 04 Aug 2026 14:52:20Reported by GoogleType

osv🔗 osv.dev👁 9 Views

TuxCare rebuilt tar to fix two vulnerabilities, fixed in 6.0.2-tuxcare.4.

Reporter	Title	Published	Views	Family All 421
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	8 Jan 202518:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Deployment Intelligence app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	24 May 202218:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Denial of Service (DoS) due to tar	17 Dec 202510:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	4 Dec 202410:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	23 Nov 202115:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in tar-6.2.0.tgz	7 Jul 202517:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in isaacs node-tar [CVE-2024-28863]	2 Apr 202517:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in isaacs node-tar [CVE-2024-28863]	2 Apr 202517:30	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Node.js (CVE-2021-37701)	22 Apr 202219:34	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:33	–	ibm

07 Aug 2026 10:02Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.4

CVSS 3.18.2 - 8.6

EPSS0.03286

SSVC

Tar vulnerabilities TuxCare update Tar security patch