RHSA-2024:3008: Important: pmix security update
Important: pmix security update
Other sources
The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes.Security Fix(es): pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:3008?
The severity of RHSA-2024:3008 is classified as important.
How do I fix RHSA-2024:3008?
To fix RHSA-2024:3008, update the pmix package to version 2.2.5-3.el8 or a later version.
Which software is affected by RHSA-2024:3008?
The RHSA-2024:3008 vulnerability affects the pmix package and its associated debuginfo and debugsource packages.
Is RHSA-2024:3008 applicable to all systems?
RHSA-2024:3008 is applicable to Red Hat Enterprise Linux systems that utilize the pmix package.
What are the potential risks of not addressing RHSA-2024:3008?
Not addressing RHSA-2024:3008 may expose your system to security vulnerabilities that could be exploited by attackers.