Most recent entries from all

ALSA-2024:2199 — Important: pmix security update

Affected: AlmaLinux:9: pmix, AlmaLinux:9: pmix-devel, AlmaLinux:9: pmix-pmi, AlmaLinux:9: pmix-pmi-devel, AlmaLinux:9: pmix-tools

The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes.

Security Fix(es):

* pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2024-02538

EUVD-2026-9284

fkie_cve-2023-41915

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0.

GHSA-m8fg-c37h-w29q

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0.

gsd-2023-41915

msrc_CVE-2023-41915 — OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race co…

msrc_CVE-2023-41915

OESA-2023-1676 — pmix security update

Affected: openEuler:20.03-LTS-SP1: pmix, openEuler:20.03-LTS-SP3: pmix, openEuler:22.03-LTS: pmix, openEuler:22.03-LTS-SP1: pmix, openEuler:22.03-LTS-SP2: pmix

PMI has been used for quite some time as a means of exchanging wireup information needed for interprocess communication. Security Fix(es): OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0.(CVE-2023-41915)

openSUSE-SU-2024:13223-1 — libmca_common_dstore1-3.2.3-11.1 on GA media

libmca_common_dstore1-3.2.3-11.1 on GA media

SUSE-SU-2023:3859-1 — Security update for pmix

Security update for pmix

UBUNTU-CVE-2023-41915

Affected: Ubuntu:Pro:18.04:LTS: pmix, Ubuntu:Pro:22.04:LTS: pmix

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0.

WID-SEC-W-2024-0995 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder seine Privilegien zu erweitern.