--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-d6dbdf62ad
2023-10-04 02:33:28.911756
--------------------------------------------------------------------------------

Name        : pmix
Product     : Fedora 38
Version     : 4.1.3
Release     : 1.fc38
URL         : https://pmix.github.io/
Summary     : Process Management Interface Exascale (PMIx)
Description :
The Process Management Interface (PMI) has been used for quite some time as
a means of exchanging wireup information needed for interprocess
communication. Two versions (PMI-1 and PMI-2) have been released as part of
the MPICH effort. While PMI-2 demonstrates better scaling properties than its
PMI-1 predecessor, attaining rapid launch and wireup of the roughly 1M
processes executing across 100k nodes expected for exascale operations remains
challenging.

PMI Exascale (PMIx) represents an attempt to resolve these questions by
providing an extended version of the PMI standard specifically designed to
support clusters up to and including exascale sizes. The overall objective of
the project is not to branch the existing pseudo-standard definitions - in
fact, PMIx fully supports both of the existing PMI-1 and PMI-2 APIs - but
rather to (a) augment and extend those APIs to eliminate some current
restrictions that impact scalability, and (b) provide a reference
implementation of the PMI-server that demonstrates the desired level of
scalability.

--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2023-41915
--------------------------------------------------------------------------------
ChangeLog:

* Thu Sep 14 2023 Michel Lind  - 4.1.3-1
- Fix CVE-2023-41915
- Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
- Use SPDX license identifier
* Fri Jul 21 2023 Fedora Release Engineering  - 4.1.2-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2238898 - CVE-2023-41915 pmix: race condition allows attackers to obtain ownership of arbitrary files
        https://bugzilla.redhat.com/show_bug.cgi?id=2238898
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-d6dbdf62ad' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/login/

Fedora 38: pmix 2023-d6dbdf62ad

October 4, 2023
Security fix for CVE-2023-41915

Summary

The Process Management Interface (PMI) has been used for quite some time as

a means of exchanging wireup information needed for interprocess

communication. Two versions (PMI-1 and PMI-2) have been released as part of

the MPICH effort. While PMI-2 demonstrates better scaling properties than its

PMI-1 predecessor, attaining rapid launch and wireup of the roughly 1M

processes executing across 100k nodes expected for exascale operations remains

challenging.

PMI Exascale (PMIx) represents an attempt to resolve these questions by

providing an extended version of the PMI standard specifically designed to

support clusters up to and including exascale sizes. The overall objective of

the project is not to branch the existing pseudo-standard definitions - in

fact, PMIx fully supports both of the existing PMI-1 and PMI-2 APIs - but

rather to (a) augment and extend those APIs to eliminate some current

restrictions that impact scalability, and (b) provide a reference

implementation of the PMI-server that demonstrates the desired level of

scalability.

Update Information:

Security fix for CVE-2023-41915

Change Log

* Thu Sep 14 2023 Michel Lind - 4.1.3-1 - Fix CVE-2023-41915 - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix - Use SPDX license identifier * Fri Jul 21 2023 Fedora Release Engineering - 4.1.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

References

[ 1 ] Bug #2238898 - CVE-2023-41915 pmix: race condition allows attackers to obtain ownership of arbitrary files https://bugzilla.redhat.com/show_bug.cgi?id=2238898

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-d6dbdf62ad' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
Name : pmix
Product : Fedora 38
Version : 4.1.3
Release : 1.fc38
URL : https://pmix.github.io/
Summary : Process Management Interface Exascale (PMIx)

Related News

News

Powered By

Footer Logo

Linux Security - Your source for Top Linux News, Advisories, HowTo's and Feature Release.

Powered By

Footer Logo