15.1. PMIx v5.x series

This file contains all the NEWS updates for the PMIx v5.x series, in reverse chronological order.

15.1.1. 5.0.1 – 9 Sep 2023

Warning

CVE-2023-41915

A security issue was reported by François Diakhate (CEA) which is addressed in the PMIx v4.2.6 and v5.0.1 releases. (Older PMIx versions may be vulnerable, but are no longer supported.)

A filesystem race condition could permit a malicious user to obtain ownership of an arbitrary file on the filesystem when parts of the PMIx library are called by a process running as uid 0. This may happen under the default configuration of certain workload managers, including Slurm.

Detailed changes include:
  • PR #3149 Multiple commits

    • Do not follow links when doing chown

    • Cleanup a little debug in new pctrl tool

  • PR #3145

    • Retrieve pset names upon PMIx_Get request

    • Add a new “pctrl” tool for requesting job control ops

  • PR #3144

    • Properly support the “log” example

    • show_help: strip leading/trailing blank lines

    • docs: fix some leftover “Open MPI” references

    • docs: fix HTML word wapping in table cells

    • Improve error handling in setup_topology

    • Define a new server type and connection flags

    • Minor cleanups for disable-dlopen

    • Fix Python bindings

  • PR #3131 Multiple commits

    • Switch to using event lib for connections

    • Roll to v5.0.1

15.1.2. 5.0.0 – 6 Aug 2023

Important

This is the first release in the v5 family and includes some significant changes, both internal and user-facing. A partial list includes:

  • initial attribute and API definitions in support of scheduler integration to both applications and resource managers/runtime environments.

  • a new shared memory implementation that removes the need for special “workaround” logic due to limitations in the prior method

  • support for “qualified” values whereby an application can post multiple values to the same key, each with one or more qualifiers - and then retrieve the desired one by specifying the appropriate qualifier.

  • availability of both function and macro equivalents for all support operations (e.g., PMIX_ARGV_APPEND and PMIx_Argv_append). Note that the macro versions have been deprecated by the PMIx Standard, but remain highly recommended for use by those compiling against the library (as opposed to dlopen’ing it)

A full list of individual changes will not be provided here, but will commence with the v5.0.1 release.