[v20.x] deps: V8: backport 2944ee9846e7 (CVE-2024-4947)
V8 backport of https://github.com/v8/v8/commit/2944ee9846e Applicable to v20.x Fixes CVE-2024-4947 which has been tagged by CISA as KEV.
Review requested:
- [ ] @nodejs/gyp
- [ ] @nodejs/security-wg
- [ ] @nodejs/v8-update
CI: https://ci.nodejs.org/job/node-test-pull-request/62096/
V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=benchmark-ubuntu2204-intel-64,v8test=v8test/6178/
V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=rhel8-s390x,v8test=v8test/6178/
As per policy this patch needs to be released on an Current branch (v22.x) and wait 2 weeks before being backported to an LTS branch
V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/nodes=rhel8-ppc64le,v8test=v8test/6178/
@marco-ippolito the information I have is that this backport has been applied to V8 version https://github.com/v8/v8/releases/tag/12.4.254.17 by commit https://github.com/v8/v8/commit/428311441d4 NodeJs version 22.8.0 is using V8 version 12.4.254.21. I'd assume the backport is already applied Current branch (v22.x), no? (https://github.com/nodejs/node/blob/v22.8.0/deps/v8/include/v8-version.h)
v20 is now in maintainance, like v18 I dont think these is going to be backported.