-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 31 Oct 2023 17:11:08 +0100 Source: pmix Binary: libpmi-pmix-dev libpmi1-pmix libpmi1-pmix-dbgsym libpmi2-pmix libpmi2-pmix-dbgsym libpmix-dev libpmix2 libpmix2-dbgsym Architecture: source amd64 Version: 3.1.2-3+deb10u1 Distribution: buster-security Urgency: high Maintainer: Alastair McKinstry <mckinstry@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: libpmi-pmix-dev - Development files for the PMI library (OpenMPI ) libpmi1-pmix - OpenMPI implementation of the PMI v1 library libpmi2-pmix - OpenMPI implementation of the PMI v2 library libpmix-dev - Development files for the PMI Exascale library libpmix2 - Process Management Interface (Exascale) library Closes: 1051729 Changes: pmix (3.1.2-3+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Debian LTS team. * CVE-2023-41915: Prevent an issue where attackers could have obtained ownership of arbitrary files via a symlink-related race condition during execution of library code with UID 0. (Closes: #1051729) * Add debian/.gitlab-ci.yml * Correct location of Lintian overrides. Checksums-Sha1: b5781db20912d477f01890cb0ac2395f708575d2 2172 pmix_3.1.2-3+deb10u1.dsc c2f8e3a25f7ed9a97dc668cbf24b68ef45145dd7 952800 pmix_3.1.2.orig.tar.xz aa622004bdb1c9ceb336ff81840ee07e52cb8340 9100 pmix_3.1.2-3+deb10u1.debian.tar.xz eeec29406daaa6605be4c19a5773edbaaa597dd3 547068 libpmi-pmix-dev_3.1.2-3+deb10u1_amd64.deb d063fdf37bd85160326798ac71899e0d9dac78cc 1776328 libpmi1-pmix-dbgsym_3.1.2-3+deb10u1_amd64.deb 3922bd991c039062aaf35642ead3835281d73321 343160 libpmi1-pmix_3.1.2-3+deb10u1_amd64.deb 0e50eb6b98f32b68f6671e446f407acfb9fe908f 1779284 libpmi2-pmix-dbgsym_3.1.2-3+deb10u1_amd64.deb f5688d496bb66b87f70909fb2beef1e283fc488b 345896 libpmi2-pmix_3.1.2-3+deb10u1_amd64.deb 5183c4e0d656745422cb44bcde64a2c55535519d 608620 libpmix-dev_3.1.2-3+deb10u1_amd64.deb 0b7e41079e6f0ba3e6903d0b58cf198450fd6b7e 2962636 libpmix2-dbgsym_3.1.2-3+deb10u1_amd64.deb bcde55781dd6cbdcf00b84c4e77b2085fdfccc8b 499160 libpmix2_3.1.2-3+deb10u1_amd64.deb 426e84e03f5e8dd1965e157f96a7de076e30aab2 8115 pmix_3.1.2-3+deb10u1_amd64.buildinfo Checksums-Sha256: 06f1b0f6a121aad3afed7a7856e426a3c4835dc23b3b556e0ff88a177fd38c1f 2172 pmix_3.1.2-3+deb10u1.dsc 3530da8d1f7fc5ea0a68f9d7105736989064793b2ef46f77dfd2006d2574fb20 952800 pmix_3.1.2.orig.tar.xz be880dfedd2963e70f9e29eec87220c02d21f814a97e80e809ad9635965026c6 9100 pmix_3.1.2-3+deb10u1.debian.tar.xz bc2b2c124d181d4b2fd2530a5ab36de928e9f4c1eb07a1c3fbf8f211472d8fe7 547068 libpmi-pmix-dev_3.1.2-3+deb10u1_amd64.deb 5237f226c5f2a7941547332ee56887d4db5e235f0177f2dc69bb3437d242b7ec 1776328 libpmi1-pmix-dbgsym_3.1.2-3+deb10u1_amd64.deb fd879e5acc10cc6bae4360f19c0f3359c80a85cad4f015f4fa2567f79869d832 343160 libpmi1-pmix_3.1.2-3+deb10u1_amd64.deb 88d65f8373ce9fc79630ff56b18a114ef50ae266203ed4a4ded635a9d4118105 1779284 libpmi2-pmix-dbgsym_3.1.2-3+deb10u1_amd64.deb 6b9c35ca39b5d2ff9e9e20a901dc31094ad8baedbb606c702dfe021ed36c4a9a 345896 libpmi2-pmix_3.1.2-3+deb10u1_amd64.deb 5ad56e47454aeffcae74366745cf64ce358215f16c6c67bd761a763f949618a7 608620 libpmix-dev_3.1.2-3+deb10u1_amd64.deb 48ab54b643c9ecb98e2da7197265ed994b3b77c3c6b89824d9e71b2f11cc436d 2962636 libpmix2-dbgsym_3.1.2-3+deb10u1_amd64.deb 44a17820e9832ff8cc82c7a30f708432e055f498d1ca030778b49bcbc4b39505 499160 libpmix2_3.1.2-3+deb10u1_amd64.deb 5df7aff0c31b85d8faaa471253fcb6e0661a085747f225b7ae80a36ece2439b5 8115 pmix_3.1.2-3+deb10u1_amd64.buildinfo Files: ac7acf447ead6da38b8705e198ed8de5 2172 net optional pmix_3.1.2-3+deb10u1.dsc 21b90dbb2ea04c81d2f9c44bd4879733 952800 net optional pmix_3.1.2.orig.tar.xz 71b804549ad634da2f0ef2d921c1c2c5 9100 net optional pmix_3.1.2-3+deb10u1.debian.tar.xz 8587d9070cb45ed6eb76e76335bfe5c8 547068 libdevel optional libpmi-pmix-dev_3.1.2-3+deb10u1_amd64.deb ded7b0f5ee74581030effb8200602e23 1776328 debug optional libpmi1-pmix-dbgsym_3.1.2-3+deb10u1_amd64.deb d326ba1eea92f4e862ac4cf15cd8e483 343160 libs optional libpmi1-pmix_3.1.2-3+deb10u1_amd64.deb 438dc91502b644ea2340230e5d7ef349 1779284 debug optional libpmi2-pmix-dbgsym_3.1.2-3+deb10u1_amd64.deb da61fdbffae853ce854f5f2736735f4e 345896 libs optional libpmi2-pmix_3.1.2-3+deb10u1_amd64.deb defb4b61b489352afc23f75e6e835e0e 608620 libdevel optional libpmix-dev_3.1.2-3+deb10u1_amd64.deb edf5acebd004147207167e8284cbe2c0 2962636 debug optional libpmix2-dbgsym_3.1.2-3+deb10u1_amd64.deb 1d07122095daeeda5050d4e0962e6654 499160 libs optional libpmix2_3.1.2-3+deb10u1_amd64.deb b54a53a7844e25b7957e91320da2ea6f 8115 net optional pmix_3.1.2-3+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmVBK5YACgkQHpU+J9Qx HljIaw/+KjyBJyBAz0Vl6/7GzvTPDpcqvMN7X+76xHL/9owGHqVFOrHESSVq2uE7 nXWniBJBcZxIQkVWekuwaZ889vt1WMPsyDVJUzNRwpUM97Z0GFqd8aG6q5H1AE3f SjzoFrHn3il2tY3vwz4rSXqY4ic16y7emkfGBdDNl25Nlu8l07VGCitFskO27PR9 gVhycj8LidDVU9UJ8WCuuvgEHJsbtEpvgab9zgZPD5AcxSspB4n+cwOIBFEDl5Kq b9cSaJTWcOo7n9UFHWGfLw1yQwgt9GijHp1ndl3VxCY8ffA1jqgrFYXoq2enqQ2K ei9+yn7G9bTSVOkzUSczKy9VMVjo9yOndzh0dFHiid51e+x+WCEe6Q7tCWWCPfGk eGcHnm6GD7/tqcPFpu13XKe5qRgRuom4T6TBtg/KsvYCoTjXJotkImfOHT0og0mK aLtXfK12VXrcTOluEt11ZQFWrp0l3+MJd8je0nJnj/VQHPm+w47EkHPrvBktmD5/ 8dfhuSoKkcFiI2IpwaIX+hWpX0/cv48TQHZlpNXZzkTxbzJFBYGzcfoIS8fWAcER jnOmBTSXVVijuy3eJXp+amixJPXWQJy3D872RNeVyCiATnsAJtE32VF29zwUgVeZ yPSCWxnPCjxxmgqr+VtRho8z8/5tSXHEsItutU7PpKjVSIlm6dE= =0ee6 -----END PGP SIGNATURE-----