What were you trying to do that didn't work?

There's a CVE (from 9/9) against pmix and all versions in RHEL/CentOS Stream seem to be affected

https://nvd.nist.gov/vuln/detail/CVE-2023-41915

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0.

Base score: 8.1 (high)

Please provide the package NVR for which bug is seen:

c8s has pmix-2.2.5-1.el8

c9s has pmix-3.2.3-3.el9

Fedora (rawhide) has 4.1.2-5.fc39 - https://src.fedoraproject.org/rpms/pmix

How reproducible:

Always

Steps to reproduce

N/A

Expected results

Fix backported

Actual results