OESA-2026-3220

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3220
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-3220.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-3220
Upstream
Published
2026-08-01T11:12:05Z
Modified
2026-08-18T01:21:26.029493198Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L CVSS Calculator
Summary
rubygem-msgpack security update
Details

MessagePack is a binary-based efficient object serialization library. It enables to exchange structured objects between many languages like JSON. But unlike JSON, it is very fast and small.

Security Fix(es):

Affected versions of this package are vulnerable to Use After Free in the clear function. An attacker can access or manipulate memory contents from another buffer by triggering the reuse of a memory page after it has been returned to the shared pool, leading to unintended disclosure or modification of data.(CVE-2026-54522)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:24.03-LTS-SP1 / rubygem-msgpack

Package

Name
rubygem-msgpack
Purl
pkg:rpm/openEuler/rubygem-msgpack&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.3-1.oe2403sp1

Ecosystem specific 

{
    "src": [
        "rubygem-msgpack-1.8.3-1.oe2403sp1.src.rpm"
    ],
    "x86_64": [
        "rubygem-msgpack-1.8.3-1.oe2403sp1.x86_64.rpm",
        "rubygem-msgpack-debuginfo-1.8.3-1.oe2403sp1.x86_64.rpm",
        "rubygem-msgpack-debugsource-1.8.3-1.oe2403sp1.x86_64.rpm"
    ],
    "aarch64": [
        "rubygem-msgpack-1.8.3-1.oe2403sp1.aarch64.rpm",
        "rubygem-msgpack-debuginfo-1.8.3-1.oe2403sp1.aarch64.rpm",
        "rubygem-msgpack-debugsource-1.8.3-1.oe2403sp1.aarch64.rpm"
    ],
    "noarch": [
        "rubygem-msgpack-help-1.8.3-1.oe2403sp1.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3220.json"