Security Bulletin: Vulnerability in Ruby affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Ruby has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

OPENSUSE-SU-2026:20998-1 Security update for tree-sitter-ruby

This update for tree-sitter-ruby fixes the following issues - CVE-2025-5889: brace-expansion: inefficient regular expression complexity in function expand of file index.js bsc1244345. - CVE-2025-59343: tar-fs: tar-fs symlink validation bypass bsc1250517. Changes for tree-sitter-ruby: - Use correc...

CVE-2026-54904 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.4-rails, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset...

GHSA-5PRR-V3J2-97MH vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails...

GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails...

GHSA-PHWJ-RPRQ-35PP vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails...

GHSA-H8W8-99G7-QMVJ vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.4-rails, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset...

CVE-2026-54906 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.4-rails, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.4-rails, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset...

GHSA-WFPW-MMFH-QQ69 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails...

GHSA-WJV4-X9W8-WM3H vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails...

GHSA-P67V-3W7G-WJG7 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails...

CVE-2026-54905 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.4-rails, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset...

GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails...

Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

Summary Concurrent::ReadWriteLockreleasewritelock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock held by another thread. A second writer can then enter its critical section while the first writer is still...

Improper Locking

Overview Affected versions of this package are vulnerable to Improper Locking in the releasewritelock and releasereadlock functions. An attacker can disrupt synchronization guarantees and exploit data races or cause denial of service by invoking these functions from unauthorized threads or withou...

GHSA-6WX8-W4F5-WWCR Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

Summary Concurrent::ReadWriteLockreleasewritelock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock held by another thread. A second writer can then enter its critical section while the first writer is still...

Concurrent Ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity

Summary Concurrent::ReentrantReadWriteLock can incorrectly grant a write lock after one thread acquires the read lock 32,768 times. The lock stores a thread's local read and write hold counts in one integer. The low 15 bits are used for the read hold count, and bit 15 is used as WRITELOCKHELD...

Wrap-around Error

Overview Affected versions of this package are vulnerable to Wrap-around Error in ReentrantReadWriteLock that causes incorrect write locks. An attacker can cause a thread to incorrectly obtain a write lock without exclusivity by repeatedly acquiring the read lock 32,768 times, which overflows the...

GHSA-WV3X-4VXV-WHPP Concurrent Ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity

Summary Concurrent::ReentrantReadWriteLock can incorrectly grant a write lock after one thread acquires the read lock 32,768 times. The lock stores a thread's local read and write hold counts in one integer. The low 15 bits are used for the read hold count, and bit 15 is used as WRITELOCKHELD...