tocsin

Debian/pmix: high 8.1

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0.

Action: Upgrade pmix to 4.2.2-1+deb12u1 or later.

Affected

introducedfixedlast affected
04.2.2-1+deb12u1-

Fixed versions

4.2.2-1+deb12u1

Sources

published · modified · JSON