GHSA-47WV-VHJ2-G66M Use of insecure temporary file in Horovod

Impact The insecure tempfile.mktemp is used when Horovod is run in an LSF job with jsrun. In that situation, a jsrun rank file is created with mktemp, which could be hijacked by another process to read or manipulate the content. This issue does not impact the use of MPI, Gloo, Spark or Ray. Patch...

PT-2022-13100

Name of the Vulnerable Software and Affected Versions horovod/horovod versions prior to 0.24.0 Description The issue is related to the use of insecure temporary files in the horovod/horovod GitHub repository. Specifically, the tempfile.mktemp function is used when Horovod is run in an LSF job wit...