(RHSA-2024:2199) Important: pmix security update

2024-04-3006:15:01

access.redhat.com

pmix

process management interface

exascale clusters

race condition

arbitrary files

cve-2023-41915

red hat enterprise linux 9.4

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

61.1%

JSON

The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes.

Security Fix(es):

pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9aarch64pmix-tools< 3.2.3-5.el9pmix-tools-3.2.3-5.el9.aarch64.rpm
RedHat9ppc64lepmix-pmi-debuginfo< 3.2.3-5.el9pmix-pmi-debuginfo-3.2.3-5.el9.ppc64le.rpm
RedHat9x86_64pmix-pmi-debuginfo< 3.2.3-5.el9pmix-pmi-debuginfo-3.2.3-5.el9.x86_64.rpm
RedHat9aarch64pmix-debuginfo< 3.2.3-5.el9pmix-debuginfo-3.2.3-5.el9.aarch64.rpm
RedHat9aarch64pmix-tools-debuginfo< 3.2.3-5.el9pmix-tools-debuginfo-3.2.3-5.el9.aarch64.rpm
RedHat9s390xpmix-pmi-devel< 3.2.3-5.el9pmix-pmi-devel-3.2.3-5.el9.s390x.rpm
RedHat9s390xpmix< 3.2.3-5.el9pmix-3.2.3-5.el9.s390x.rpm
RedHat9x86_64pmix-tools-debuginfo< 3.2.3-5.el9pmix-tools-debuginfo-3.2.3-5.el9.x86_64.rpm
RedHat9aarch64pmix< 3.2.3-5.el9pmix-3.2.3-5.el9.aarch64.rpm
RedHat9s390xpmix-debugsource< 3.2.3-5.el9pmix-debugsource-3.2.3-5.el9.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	aarch64	pmix-tools	< 3.2.3-5.el9	pmix-tools-3.2.3-5.el9.aarch64.rpm
RedHat	9	ppc64le	pmix-pmi-debuginfo	< 3.2.3-5.el9	pmix-pmi-debuginfo-3.2.3-5.el9.ppc64le.rpm
RedHat	9	x86_64	pmix-pmi-debuginfo	< 3.2.3-5.el9	pmix-pmi-debuginfo-3.2.3-5.el9.x86_64.rpm
RedHat	9	aarch64	pmix-debuginfo	< 3.2.3-5.el9	pmix-debuginfo-3.2.3-5.el9.aarch64.rpm
RedHat	9	aarch64	pmix-tools-debuginfo	< 3.2.3-5.el9	pmix-tools-debuginfo-3.2.3-5.el9.aarch64.rpm
RedHat	9	s390x	pmix-pmi-devel	< 3.2.3-5.el9	pmix-pmi-devel-3.2.3-5.el9.s390x.rpm
RedHat	9	s390x	pmix	< 3.2.3-5.el9	pmix-3.2.3-5.el9.s390x.rpm
RedHat	9	x86_64	pmix-tools-debuginfo	< 3.2.3-5.el9	pmix-tools-debuginfo-3.2.3-5.el9.x86_64.rpm
RedHat	9	aarch64	pmix	< 3.2.3-5.el9	pmix-3.2.3-5.el9.aarch64.rpm
RedHat	9	s390x	pmix-debugsource	< 3.2.3-5.el9	pmix-debugsource-3.2.3-5.el9.s390x.rpm