Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-41915: OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | pmix | 0:3.2.3-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pmix-debuginfo | 0:3.2.3-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pmix-debugsource | 0:3.2.3-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pmix-devel | 0:3.2.3-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pmix-pmi | 0:3.2.3-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pmix-pmi-debuginfo | 0:3.2.3-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pmix-pmi-devel | 0:3.2.3-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pmix-tools | 0:3.2.3-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pmix-tools-debuginfo | 0:3.2.3-1.amzn2023.0.3 |
Vulnerabilities 1
-
Unscored —
OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race co…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-41915.html