Skip to content
OpenAdvisories

Package · Debian

ruby-concurrent

3 known vulnerabilities.

3 results · Feed

  • Low 2.1

    concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

    concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock he…

  • High 8.2

    concurrent-ruby: `AtomicReference#update` livelocks when the stored value is `Float::NAN`

    concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a permanent busy retry loop when the current value is Float::NAN. The issue is caused by the interaction between AtomicReference#update, which…

  • Low 2.0

    concurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity

    concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReentrantReadWriteLock can incorrectly grant a write lock after one thread acquires the read lock 32,768 times. The lock stores a thread's local read and write hold counts in …