SUSE-SU-2026:22259-1
Security update for rpcbind
No scoreFix available
SUSE-SU-2026:22259-1 is a vulnerability with no CVSS score yet in rpcbind, published June 22, 2026. No source lists public exploit code. Fixed in rpcbind 1.2.9-160000.1.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.9-160000.1.1rpcbind
Description
This update for rpcbind fixes the following issues
- Update to rpcbind 1.2.9 (bsc#1267212) https://lore.kernel.org/linux-nfs/5cad3ab4-d24a-45fa-b1e9-d57b2c47a5e4@redhat.com/
- rpcinfo: stack buffer overflow in rpcinfo rpcbaddrlist()
- rpcbind: Stop unauthenticated oversized allocation in PMAPPROC_CALLIT decode
- rpcbind: fix memory leak in read_warmstart()
- rpcbind: fix memory leaks in network_init()
- rpcbind: fix memory leak in init_transport()
- Added -v (print version and compile flags)
- rpcinfo: Removed a number of "old-style function definition" warnings
- man/rpcbind: Update list of options
- Comment out ListenStream=@/run/rpcbind.sock
- [nfs/nfs-utils/rpcbind] rpcbind: avoid dereferencing NULL from realloc()
- systemd/rpcbind.service.in: Add various hardenings options
- man/rpcbind: Add Files section to manpage
- Moved rpcbind.lock and default configs to /run instead of /var/run
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rpcbindSUSE:Linux Micro 6.2 | before 1.2.9-160000.1.1 | 1.2.9-160000.1.1 |
What each source reports
OSVNo score
Security update for rpcbind
This update for rpcbind fixes the following issues
- Update to rpcbind 1.2.9 (bsc#1267212) https://lore.kernel.org/linux-nfs/5cad3ab4-d24a-45fa-b1e9-d57b2c47a5e4@redhat.com/
- rpcinfo: stack buffer overflow in rpcinfo rpcbaddrlist()
- rpcbind: Stop unauthenticated oversized allocation in PMAPPROC_CALLIT decode
- rpcbind: fix memory leak in read_warmstart()
- rpcbind: fix memory leaks in network_init()
- rpcbind: fix memory leak in init_transport()
- Added -v (print version and compile flags)
- rpcinfo: Removed a number of "old-style function definition" warnings
- man/rpcbind: Update list of options
- Comment out ListenStream=@/run/rpcbind.sock
- [nfs/nfs-utils/rpcbind] rpcbind: avoid dereferencing NULL from realloc()
- systemd/rpcbind.service.in: Add various hardenings options
- man/rpcbind: Add Files section to manpage
- Moved rpcbind.lock and default configs to /run instead of /var/run
- Record
SUSE-SU-2026:22259-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.