SUSE-SU-2026:22331-1
Security update for rpcbind
No scoreFix available
This update for rpcbind fixes the following issues
- Update to rpcbind 1.2.9 (bsc#1267212) https://lore.kernel.org/linux-nfs/5cad3ab4-d24a-45fa-b1e9-d57b2c47a5e4@redhat.com/
- rpcinfo: stack buffer overflow in rpcinfo rpcbaddrlist()
- rpcbind: Stop unauthenticated oversized allocation in PMAPPROC_CALLIT decode
- rpcbind: fix memory leak in read_warmstart()
- rpcbind: fix memory leaks in network_init()
- rpcbind: fix memory leak in init_transport()
- Added -v (print version and compile flags)
- rpcinfo: Removed a number of "old-style function definition" warnings
- man/rpcbind: Update list of options
- Comment out ListenStream=@/run/rpcbind.sock
- [nfs/nfs-utils/rpcbind] rpcbind: avoid dereferencing NULL from realloc()
- systemd/rpcbind.service.in: Add various hardenings options
- man/rpcbind: Add Files section to manpage
- Moved rpcbind.lock and default configs to /run instead of /var/run
What each source reports
OSVNo score
Security update for rpcbind
This update for rpcbind fixes the following issues
- Update to rpcbind 1.2.9 (bsc#1267212) https://lore.kernel.org/linux-nfs/5cad3ab4-d24a-45fa-b1e9-d57b2c47a5e4@redhat.com/
- rpcinfo: stack buffer overflow in rpcinfo rpcbaddrlist()
- rpcbind: Stop unauthenticated oversized allocation in PMAPPROC_CALLIT decode
- rpcbind: fix memory leak in read_warmstart()
- rpcbind: fix memory leaks in network_init()
- rpcbind: fix memory leak in init_transport()
- Added -v (print version and compile flags)
- rpcinfo: Removed a number of "old-style function definition" warnings
- man/rpcbind: Update list of options
- Comment out ListenStream=@/run/rpcbind.sock
- [nfs/nfs-utils/rpcbind] rpcbind: avoid dereferencing NULL from realloc()
- systemd/rpcbind.service.in: Add various hardenings options
- man/rpcbind: Add Files section to manpage
- Moved rpcbind.lock and default configs to /run instead of /var/run
- Record
SUSE-SU-2026:22331-1- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
SUSE-SU-2026:22331-1 is a vulnerability with no CVSS score yet in rpcbind, published June 22, 2026. No source lists public exploit code. Fixed in rpcbind 1.2.9-160000.1.1.