[ALSA-2024:3008] Important: pmix security update
Type:
security
Severity:
important
Release date:
2024-05-29
Description:
The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes. Security Fix(es): * pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 pmix-devel-2.2.5-3.el8.aarch64.rpm 8f4b726638eb1af70678a9fa5e946c27a7df2a53034456188b87dc68518f2c29
aarch64 pmix-2.2.5-3.el8.aarch64.rpm a213876e02465874729eedab63a2e4b656d4e120a1f34c901548ed99141bf7d3
i686 pmix-2.2.5-3.el8.i686.rpm 443e409fab4195bf81f30f885ad2e0b7551ee7d9c39d2ab2683a3fe1cc7b05a1
i686 pmix-devel-2.2.5-3.el8.i686.rpm 4fb9b9054984352000f05d130e9c168c1b9e3c4b5111db1f7d1c9e796c8da5e6
ppc64le pmix-2.2.5-3.el8.ppc64le.rpm 1db8d40bb9274401ab9a8d197c136199b09b3106cf68738d2540152fad3b016a
ppc64le pmix-devel-2.2.5-3.el8.ppc64le.rpm b9fd78c98c42c950b2f5f18d1cc0617b28164bd7d2c3f3f55798ca2cef772935
s390x pmix-2.2.5-3.el8.s390x.rpm 2ef985b6a718026d318372469599ff62589ed37b873629ceb5165f16181176f7
s390x pmix-devel-2.2.5-3.el8.s390x.rpm 6672e5f643f48b76e58bb592e193327ca8d15feec02fa4064afaa6bcef439d46
x86_64 pmix-devel-2.2.5-3.el8.x86_64.rpm 3bf869f6adb86430c9b8cc13cbddf573db4529d361cd5f5d3436762d4b11823d
x86_64 pmix-2.2.5-3.el8.x86_64.rpm 42516bcca9af9e9bb20731124debb5790df6a715a844f48034e96f0a709eadd5
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.