# ruby-concurrent security updates

Patch Radar has 3 security fixes for ruby-concurrent, closing 3 CVEs. The newest is DEBIAN-CVE-2026-54904 (1.3.7-1), released July 3, 2026.

- Web page: https://patchblox.com/security/product/linux/ruby-concurrent
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-54904](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54904.md) | Jul 3, 2026 | Debian 14 1.3.7-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-54906](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54906.md) | Jul 3, 2026 | Debian 14 1.3.7-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-54905](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54905.md) | Jul 3, 2026 | Debian 14 1.3.7-1 | Routine | 1 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo