It doesn't look like a new Beta build was released for CVE-2024-42218. Can you confirm if the Beta audience has been left vulnerable, or whether it was silently patched in?
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided
ModeratorThanks again for the question. 🙂
-Dave
Thanks for clarifying! My concern was more about the Beta audience being 0day'ed by the Production branch. Would be good to see simultaneous CVE disclosure across both branches. :)
ModeratorHello kop48! 👋
As long as you are on version 8.10.38 (August) or later, you have all available fixes.
You can follow this guide to find the version number of 1Password on your device. If you are not running version 8.10.38 or higher, you can learn how to keep 1Password updated here.
The team is looking into updating the release notes for the beta version to include mention of the relevant CVEs.
-Dave
It doesn't look like a new Beta build was released for CVE-2024-42218. Can you confirm if the Beta audience has been left vulnerable, or whether it was silently patched in?
\n\n1Password Version: Not Provided
\nExtension Version: Not Provided
\nOS Version: Not Provided
\nBrowser: Not Provided
It doesn't look like a new Beta build was released for CVE-2024-42218. Can you confirm if the Beta audience has been left vulnerable, or whether it was silently patched in?
\n\n1Password Version: Not Provided
\nExtension Version: Not Provided
\nOS Version: Not Provided
\nBrowser: Not Provided
Thanks again for the question. 🙂
\n\n-Dave
","body@stripHtml({\"removeProcessingText\":false,\"removeSpoilerMarkup\":false,\"removeTocMarkup\":false,\"truncateLength\":200})@stringLength":"44","kudosSumWeight":1,"repliesCount":0,"postTime":"2024-08-15T08:15:46.000-07:00","lastPublishTime":"2024-08-15T08:15:46.000-07:00","metrics":{"__typename":"MessageMetrics","views":10},"visibilityScope":"PUBLIC","placeholder":false,"originalMessageForPlaceholder":null,"isEscalated":null,"solution":false,"entityType":"FORUM_REPLY","eventPath":"category:discuss/community:cuxzj43862board:1password/message:128372/message:128375","replies":{"__typename":"MessageConnection","pageInfo":{"__typename":"PageInfo","hasNextPage":false,"endCursor":null,"hasPreviousPage":false,"startCursor":null},"edges":[]},"attachments":{"__typename":"AttachmentConnection","edges":[],"pageInfo":{"__typename":"PageInfo","hasNextPage":false,"endCursor":null,"hasPreviousPage":false,"startCursor":null}},"customFields":[{"__typename":"CustomStringField","name":"smartconx_source_identifier","stringValue":""},{"__typename":"CustomStringField","name":"smartconx_message_origin","stringValue":""},{"__typename":"CustomStringField","name":"smartconx_share_messages","stringValue":""}]},"ModerationData:moderation_data:128374":{"__typename":"ModerationData","id":"moderation_data:128374","status":"APPROVED","rejectReason":null,"isReportedAbuse":false,"rejectUser":null,"rejectTime":null,"rejectActorType":null},"ForumReplyMessage:message:128374":{"__typename":"ForumReplyMessage","author":{"__ref":"User:user:16191"},"id":"message:128374","revisionNum":1,"uid":128374,"depth":1,"hasGivenKudo":false,"subscribed":false,"board":{"__ref":"Forum:board:1password"},"parent":{"__ref":"ForumTopicMessage:message:128372"},"conversation":{"__ref":"Conversation:conversation:128372"},"subject":"Re: Beta build update for CVE-2024-42218?","moderationData":{"__ref":"ModerationData:moderation_data:128374"},"body":"Thanks for clarifying! My concern was more about the Beta audience being 0day'ed by the Production branch. Would be good to see simultaneous CVE disclosure across both branches. :)
","body@stripHtml({\"removeProcessingText\":false,\"removeSpoilerMarkup\":false,\"removeTocMarkup\":false,\"truncateLength\":200})@stringLength":"182","kudosSumWeight":0,"repliesCount":0,"postTime":"2024-08-12T16:21:52.000-07:00","lastPublishTime":"2024-08-12T16:21:52.000-07:00","metrics":{"__typename":"MessageMetrics","views":6},"visibilityScope":"PUBLIC","placeholder":false,"originalMessageForPlaceholder":null,"isEscalated":null,"solution":false,"entityType":"FORUM_REPLY","eventPath":"category:discuss/community:cuxzj43862board:1password/message:128372/message:128374","replies":{"__typename":"MessageConnection","pageInfo":{"__typename":"PageInfo","hasNextPage":false,"endCursor":null,"hasPreviousPage":false,"startCursor":null},"edges":[]},"attachments":{"__typename":"AttachmentConnection","edges":[],"pageInfo":{"__typename":"PageInfo","hasNextPage":false,"endCursor":null,"hasPreviousPage":false,"startCursor":null}},"customFields":[{"__typename":"CustomStringField","name":"smartconx_source_identifier","stringValue":""},{"__typename":"CustomStringField","name":"smartconx_message_origin","stringValue":""},{"__typename":"CustomStringField","name":"smartconx_share_messages","stringValue":""}]},"ModerationData:moderation_data:128373":{"__typename":"ModerationData","id":"moderation_data:128373","status":"APPROVED","rejectReason":null,"isReportedAbuse":false,"rejectUser":null,"rejectTime":null,"rejectActorType":null},"ForumReplyMessage:message:128373":{"__typename":"ForumReplyMessage","author":{"__ref":"User:user:55"},"id":"message:128373","revisionNum":1,"uid":128373,"depth":1,"hasGivenKudo":false,"subscribed":false,"board":{"__ref":"Forum:board:1password"},"parent":{"__ref":"ForumTopicMessage:message:128372"},"conversation":{"__ref":"Conversation:conversation:128372"},"subject":"Re: Beta build update for CVE-2024-42218?","moderationData":{"__ref":"ModerationData:moderation_data:128373"},"body":"Hello kop48! 👋
\n\nAs long as you are on version 8.10.38 (August) or later, you have all available fixes.
\n\nYou can follow this guide to find the version number of 1Password on your device. If you are not running version 8.10.38 or higher, you can learn how to keep 1Password updated here.
\n\nThe team is looking into updating the release notes for the beta version to include mention of the relevant CVEs.
\n\n-Dave
","body@stripHtml({\"removeProcessingText\":false,\"removeSpoilerMarkup\":false,\"removeTocMarkup\":false,\"truncateLength\":200})@stringLength":"203","kudosSumWeight":0,"repliesCount":0,"postTime":"2024-08-12T08:11:19.000-07:00","lastPublishTime":"2024-08-12T08:11:19.000-07:00","metrics":{"__typename":"MessageMetrics","views":5},"visibilityScope":"PUBLIC","placeholder":false,"originalMessageForPlaceholder":null,"isEscalated":null,"solution":false,"entityType":"FORUM_REPLY","eventPath":"category:discuss/community:cuxzj43862board:1password/message:128372/message:128373","replies":{"__typename":"MessageConnection","pageInfo":{"__typename":"PageInfo","hasNextPage":false,"endCursor":null,"hasPreviousPage":false,"startCursor":null},"edges":[]},"attachments":{"__typename":"AttachmentConnection","edges":[],"pageInfo":{"__typename":"PageInfo","hasNextPage":false,"endCursor":null,"hasPreviousPage":false,"startCursor":null}},"customFields":[{"__typename":"CustomStringField","name":"smartconx_source_identifier","stringValue":""},{"__typename":"CustomStringField","name":"smartconx_message_origin","stringValue":""},{"__typename":"CustomStringField","name":"smartconx_share_messages","stringValue":""}]},"CachedAsset:text:en_US-components/community/Navbar-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/community/Navbar-1746712703817","value":{"community":"Community Home","inbox":"Inbox","manageContent":"Manage Content","tos":"Terms of Service","forgotPassword":"Forgot Password","themeEditor":"Theme Editor","edit":"Edit Navigation Bar","skipContent":"Skip to content","external-1":"Using 1Password at Home","Common-community-blog-link":"Community blog","testing4personal-products-1":"Our Apps","developers":"Developers","developer-forums":"Developer Forums","testing4business":"Individuals & Families","testing4personal-products-2":"Support Forums","testing123":"1Password (TEST)","device-trust-link":"Device Trust","passage-link":"Passage","beta-1":"Beta Program","advocacy":"Champions","business-and-teams":"Using 1Password","external-9":"1Password for Open Source","external-8":"Downloads","news-link":"Industry News","external-7":"Status Page","external-6":"Release Notes","announcements-news":"Announcements & News","external-5":"1Password blog","memberships-and-families":"Developer","external-4":"Random But Memorable","events":"Events","external-3":"Documentation","external-2":"Developers","discuss-link":"Discussions","testing4personal-products":"Individual & Families","lounge-link":"Lounge","testing4business-1":"Betas & Pre-releases","external":"Using 1Password at Work","testing4resources-1":"Blog","customer-stories":"Customer Spotlights","product-feedback-link":"Product Feedback","advocacy-1":"Become a Champion","ideas-test":"Product Ideas","events-link":"Events","developer-newsletter":"Developer Newsletter","external-link":"Help and documentation","support":"Support","1password-link":"Password Manager","product-feedback":"Product Feedback","contribute":"Contribute","employeeforum":"Employee","guides-link":"Guides and toolkits","products":"Our Apps","general":"General","Common-developer-blog-link":"Developer blog","test-structure":"Developer Hub","connect":"Discussions","beta":"Product","developers-link":"Engage","testing4products":"Forums","testing4resources":"Get Started","learn":"Learn","user-groups":"Groups","external-link-1":"Dev Tools","user-groups-1":"Programs","external-link-2":"Integrations","user-groups-2":"Ask Me Anything","Common-discuss-link":"Discussions","connect-1":"Resources","whats-new-link":"What's new","Common-developers-link":"Developers"},"localOverride":false},"CachedAsset:text:en_US-components/community/NavbarHamburgerDropdown-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/community/NavbarHamburgerDropdown-1746712703817","value":{"hamburgerLabel":"Side Menu"},"localOverride":false},"CachedAsset:text:en_US-components/community/BrandLogo-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/community/BrandLogo-1746712703817","value":{"logoAlt":"Khoros","themeLogoAlt":"Brand Logo"},"localOverride":false},"CachedAsset:text:en_US-components/community/NavbarTextLinks-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/community/NavbarTextLinks-1746712703817","value":{"more":"More"},"localOverride":false},"CachedAsset:text:en_US-components/search/SpotlightSearchIcon-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/search/SpotlightSearchIcon-1746712703817","value":{"search":"Search"},"localOverride":false},"CachedAsset:text:en_US-components/authentication/AuthenticationLink-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/authentication/AuthenticationLink-1746712703817","value":{"title.login":"Sign In","title.registration":"Register","title.forgotPassword":"Forgot Password","title.multiAuthLogin":"Sign In"},"localOverride":false},"CachedAsset:text:en_US-components/nodes/NodeLink-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/nodes/NodeLink-1746712703817","value":{"place":"Place {name}"},"localOverride":false},"CachedAsset:text:en_US-components/messages/EscalatedMessageBanner-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/messages/EscalatedMessageBanner-1746712703817","value":{"escalationMessage":"Escalated to Salesforce by {username} on {date}","viewDetails":"View Details","modalTitle":"Case Details","escalatedBy":"Escalated by: ","escalatedOn":"Escalated on: ","caseNumber":"Case Number: ","status":"Status: ","lastUpdateDate":"Last Update: ","automaticEscalation":"automatic escalation","anonymous":"Anonymous"},"localOverride":false},"CachedAsset:text:en_US-components/users/UserLink-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/users/UserLink-1746712703817","value":{"authorName":"View Profile: {author}","anonymous":"Anonymous"},"localOverride":false},"CachedAsset:text:en_US-shared/client/components/users/UserRank-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-shared/client/components/users/UserRank-1746712703817","value":{"rankName":"{rankName}","userRank":"Author rank {rankName}"},"localOverride":false},"CachedAsset:text:en_US-components/messages/MessageTime-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/messages/MessageTime-1746712703817","value":{"postTime":"Published: {time}","lastPublishTime":"Last Update: {time}","conversation.lastPostingActivityTime":"Last posting activity time: {time}","conversation.lastPostTime":"Last post time: {time}","moderationData.rejectTime":"Rejected time: {time}"},"localOverride":false},"CachedAsset:text:en_US-components/messages/MessageSolvedBadge-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/messages/MessageSolvedBadge-1746712703817","value":{"solved":"Solved"},"localOverride":false},"CachedAsset:text:en_US-components/messages/MessageSubject-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/messages/MessageSubject-1746712703817","value":{"noSubject":"(no subject)"},"localOverride":false},"CachedAsset:text:en_US-components/messages/MessageBody-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/messages/MessageBody-1746712703817","value":{"showMessageBody":"Show More","mentionsErrorTitle":"{mentionsType, select, board {Board} user {User} message {Message} other {}} No Longer Available","mentionsErrorMessage":"The {mentionsType} you are trying to view has been removed from the community.","videoProcessing":"Video is being processed. Please try again in a few minutes.","bannerTitle":"Video provider requires cookies to play the video. Accept to continue or {url} it directly on the provider's site.","buttonTitle":"Accept","urlText":"watch"},"localOverride":false},"CachedAsset:text:en_US-components/messages/MessageCustomFields-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/messages/MessageCustomFields-1746712703817","value":{"CustomField.default.label":"Value of {name}"},"localOverride":false},"CachedAsset:text:en_US-shared/client/components/common/QueryHandler-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-shared/client/components/common/QueryHandler-1746712703817","value":{"title":"Query Handler"},"localOverride":false},"CachedAsset:text:en_US-components/messages/MessageReplyButton-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/messages/MessageReplyButton-1746712703817","value":{"repliesCount":"{count}","title":"Reply","title@board:BLOG@message:root":"Comment","title@board:TKB@message:root":"Comment","title@board:IDEA@message:root":"Comment","title@board:OCCASION@message:root":"Comment"},"localOverride":false},"CachedAsset:text:en_US-components/community/NavbarDropdownToggle-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/community/NavbarDropdownToggle-1746712703817","value":{"ariaLabelClosed":"Press the down arrow to open the menu"},"localOverride":false},"CachedAsset:text:en_US-shared/client/components/users/UserAvatar-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-shared/client/components/users/UserAvatar-1746712703817","value":{"altText":"{login}'s avatar","altTextGeneric":"User's avatar"},"localOverride":false},"CachedAsset:text:en_US-shared/client/components/ranks/UserRankLabel-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-shared/client/components/ranks/UserRankLabel-1746712703817","value":{"altTitle":"Icon for {rankName} rank"},"localOverride":false},"CachedAsset:text:en_US-components/tags/TagView/TagViewChip-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/tags/TagView/TagViewChip-1746712703817","value":{"tagLabelName":"Tag name {tagName}"},"localOverride":false},"CachedAsset:text:en_US-components/messages/MessageListMenu-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/messages/MessageListMenu-1746712703817","value":{"postTimeAsc":"Oldest","postTimeDesc":"Newest","kudosSumWeightAsc":"Least Liked","kudosSumWeightDesc":"Most Liked","sortTitle":"Sort By","sortedBy.item":" { itemName, select, postTimeAsc {Oldest} postTimeDesc {Newest} kudosSumWeightAsc {Least Liked} kudosSumWeightDesc {Most Liked} other {}}"},"localOverride":false},"CachedAsset:text:en_US-components/messages/AcceptedSolutionButton-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/messages/AcceptedSolutionButton-1746712703817","value":{"accept":"Mark as Solution","accepted":"Marked as Solution","errorHeader":"Error!","errorAdd":"There was an error marking as solution.","errorRemove":"There was an error unmarking as solution.","solved":"Solved","topicAlreadySolvedErrorTitle":"Solution Already Exists","topicAlreadySolvedErrorDesc":"Refresh the browser to view the existing solution"},"localOverride":false},"CachedAsset:text:en_US-components/messages/MessageView/MessageViewInline-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-components/messages/MessageView/MessageViewInline-1746712703817","value":{"bylineAuthor":"{bylineAuthor}","bylineBoard":"{bylineBoard}","anonymous":"Anonymous","place":"Place {bylineBoard}","gotoParent":"Go to parent {name}"},"localOverride":false},"CachedAsset:text:en_US-shared/client/components/common/Pager/PagerLoadMore-1746712703817":{"__typename":"CachedAsset","id":"text:en_US-shared/client/components/common/Pager/PagerLoadMore-1746712703817","value":{"loadMore":"Show More"},"localOverride":false}}}},"page":"/forums/ForumMessagePage/ForumMessagePage","query":{"boardId":"1password","messageSubject":"beta-build-update-for-cve-2024-42218","messageId":"128372"},"buildId":"-gVUpXaWnPcjlrLJZ92B7","runtimeConfig":{"buildInformationVisible":false,"logLevelApp":"info","logLevelMetrics":"info","openTelemetryClientEnabled":false,"openTelemetryConfigName":"onepassword","openTelemetryServiceVersion":"25.3.0","openTelemetryUniverse":"prod","openTelemetryCollector":"http://localhost:4318","openTelemetryRouteChangeAllowedTime":"5000","apolloDevToolsEnabled":false,"inboxMuteWipFeatureEnabled":false},"isFallback":false,"isExperimentalCompile":false,"dynamicIds":["./components/seo/QAPageSchema/QAPageSchema.tsx","./components/community/Navbar/NavbarWidget.tsx","./components/community/Breadcrumb/BreadcrumbWidget.tsx","./components/messages/TopicWithThreadedReplyListWidget/TopicWithThreadedReplyListWidget.tsx","./components/messages/MessageView/MessageViewStandard/MessageViewStandard.tsx","./components/messages/ThreadedReplyList/ThreadedReplyList.tsx","./components/nodes/NodeActionButtonWidget/NodeActionButtonWidget.tsx","./components/messages/MessageListForNodeByRecentActivityWidget/MessageListForNodeByRecentActivityWidget.tsx","./components/customComponent/CustomComponent/CustomComponent.tsx","../shared/client/components/common/List/UnwrappedList/UnwrappedList.tsx","./components/tags/TagView/TagView.tsx","./components/tags/TagView/TagViewChip/TagViewChip.tsx","../shared/client/components/common/List/UnstyledList/UnstyledList.tsx","./components/messages/MessageView/MessageView.tsx","../shared/client/components/common/List/ListGroup/ListGroup.tsx","./components/messages/MessageView/MessageViewInline/MessageViewInline.tsx","../shared/client/components/common/Pager/PagerLoadMore/PagerLoadMore.tsx","./components/customComponent/CustomComponentContent/TemplateContent.tsx"],"appGip":true,"scriptLoader":[]}
