Test ID:	1.3.6.1.4.1.25623.1.0.884955
Category:	Fedora Local Security Checks
Title:	Fedora: Security Advisory for pmix (FEDORA-2023-d6dbdf62ad)
Summary:	The remote host is missing an update for the 'pmix'; package(s) announced via the FEDORA-2023-d6dbdf62ad advisory.
Description:	Summary: The remote host is missing an update for the 'pmix' package(s) announced via the FEDORA-2023-d6dbdf62ad advisory. Vulnerability Insight: The Process Management Interface (PMI) has been used for quite some time as a means of exchanging wireup information needed for interprocess communication. Two versions (PMI-1 and PMI-2) have been released as part of the MPICH effort. While PMI-2 demonstrates better scaling properties than its PMI-1 predecessor, attaining rapid launch and wireup of the roughly 1M processes executing across 100k nodes expected for exascale operations remains challenging. PMI Exascale (PMIx) represents an attempt to resolve these questions by providing an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes. The overall objective of the project is not to branch the existing pseudo-standard definitions - in fact, PMIx fully supports both of the existing PMI-1 and PMI-2 APIs - but rather to (a) augment and extend those APIs to eliminate some current restrictions that impact scalability, and (b) provide a reference implementation of the PMI-server that demonstrates the desired level of scalability. Affected Software/OS: 'pmix' package(s) on Fedora 38. Solution: Please install the updated package(s). CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-41915 Debian Security Information: DSA-5547 (Google Search) https://www.debian.org/security/2023/dsa-5547 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFKIY6SNC3KQNZMVROWMIW6DI5XPNKQX/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YDLWSMQYXF2ZGOQKCG26H6ZZA5FEH7HX/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYJ7IRNR6NHJMTNOV3E3W3D5MLDRDCJX/ https://docs.openpmix.org/en/latest/security.html https://lists.debian.org/debian-lts-announce/2023/10/msg00048.html
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.