Release 1.8.2

byroot · byroot · commit 09c914d75f29 · 2026-06-09T09:54:48.000+02:00
diff --git a/ChangeLog b/ChangeLog
@@ -1,3 +1,9 @@
+2026-06-09 1.8.2
+
+* Fix `Buffer#clear` to properly reset memory chunks before adding them back to the pool.
+  This could have caused data to leak across buffers when using the MessagePack::Buffer API
+  directly. [CVE-PENDING].
+
 2026-05-28 1.8.1
 
 * Workaround rare compilation issue when `rb_hash_new_capa` isn't properly detected.
diff --git a/lib/msgpack/version.rb b/lib/msgpack/version.rb
@@ -1,5 +1,5 @@
 module MessagePack
-  VERSION = "1.8.1"
+  VERSION = "1.8.2"
   # Note for maintainers:
   #  Don't miss building/releasing the JRuby version (rake buld:java)
   #  See "How to build -java rubygems" in README for more details.
