node icon indicating copy to clipboard operation
node copied to clipboard

[v18.x] deps: V8: backport 2944ee9846e7 (V18.x CVE-2024-4947)

Open giancorderoortiz opened this issue 1 year ago • 16 comments

V8 backport of https://github.com/v8/v8/commit/2944ee9846e Applicable to v18.x Fixes CVE-2024-4947 which has been tagged by CISA as KEV.

Maglev-graph-builder.cc not updated as functionality not present in V18.x

giancorderoortiz avatar Sep 05 '24 18:09 giancorderoortiz

Review requested:

  • [ ] @nodejs/gyp
  • [ ] @nodejs/security-wg
  • [ ] @nodejs/v8-update

nodejs-github-bot avatar Sep 05 '24 18:09 nodejs-github-bot

This PR links a security report as the cause, so I've applied the security label. LMK if I was incorrect in this.

avivkeller avatar Sep 05 '24 18:09 avivkeller

V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=benchmark-ubuntu2204-intel-64,v8test=v8test/6205/

nodejs-github-bot avatar Sep 20 '24 11:09 nodejs-github-bot

V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=rhel8-s390x,v8test=v8test/6205/

nodejs-github-bot avatar Sep 20 '24 11:09 nodejs-github-bot

CI: https://ci.nodejs.org/job/node-test-pull-request/62598/

nodejs-github-bot avatar Sep 20 '24 11:09 nodejs-github-bot

V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=benchmark-ubuntu2204-intel-64,v8test=v8test/6206/

nodejs-github-bot avatar Sep 20 '24 11:09 nodejs-github-bot

V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=rhel8-s390x,v8test=v8test/6206/

nodejs-github-bot avatar Sep 20 '24 11:09 nodejs-github-bot

V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=rhel8-ppc64le,v8test=v8test/6205/

nodejs-github-bot avatar Sep 20 '24 11:09 nodejs-github-bot

V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=rhel8-ppc64le,v8test=v8test/6206/

nodejs-github-bot avatar Sep 20 '24 11:09 nodejs-github-bot

CI: https://ci.nodejs.org/job/node-test-pull-request/62604/

nodejs-github-bot avatar Sep 20 '24 14:09 nodejs-github-bot

CI: https://ci.nodejs.org/job/node-test-pull-request/62786/

nodejs-github-bot avatar Sep 26 '24 17:09 nodejs-github-bot

V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=benchmark-ubuntu2204-intel-64,v8test=v8test/6216/

nodejs-github-bot avatar Sep 26 '24 17:09 nodejs-github-bot

V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=rhel8-s390x,v8test=v8test/6216/

nodejs-github-bot avatar Sep 26 '24 17:09 nodejs-github-bot

V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=rhel8-ppc64le,v8test=v8test/6216/

nodejs-github-bot avatar Sep 26 '24 17:09 nodejs-github-bot

CI: https://ci.nodejs.org/job/node-test-pull-request/62788/

nodejs-github-bot avatar Sep 26 '24 19:09 nodejs-github-bot

CI: https://ci.nodejs.org/job/node-test-pull-request/62800/

nodejs-github-bot avatar Sep 27 '24 13:09 nodejs-github-bot

CI: https://ci.nodejs.org/job/node-test-pull-request/63394/

nodejs-github-bot avatar Nov 02 '24 17:11 nodejs-github-bot

CI: https://ci.nodejs.org/job/node-test-pull-request/65124/

nodejs-github-bot avatar Feb 10 '25 15:02 nodejs-github-bot

V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=benchmark-ubuntu2204-intel-64,v8test=v8test/6404/

nodejs-github-bot avatar Feb 10 '25 15:02 nodejs-github-bot

V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=rhel8-ppc64le,v8test=v8test/6404/

nodejs-github-bot avatar Feb 10 '25 15:02 nodejs-github-bot

V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=rhel8-s390x,v8test=v8test/6404/

nodejs-github-bot avatar Feb 10 '25 15:02 nodejs-github-bot

Closing as it was decided in TSC meeting not to backport them

marco-ippolito avatar Feb 10 '25 16:02 marco-ippolito