SUSE-SU-2026:22069-1
SUSE-SU-2026:22069-1 · Security update for rpcbind
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for rpcbind fixes the following issues Update to rpcbind 1.2.9: Security issue: - Fix several memory leaks and buffer overflows (bsc#1267212). Non security issue: - rpcbind fails to start (tumbleweed snapshot 20181120) (bsc#1117217). Changes: * rpcinfo: stack buffer overflow in rpcinfo rpcbaddrlist() * rpcbind: Stop unauthenticated oversized allocation in PMAPPROC_CALLIT decode * rpcbind: fix memory leak in read_warmstart() * rpcbind: fix memory leaks in network_init() * rpcbind: fix memory leak in init_transport() * Added -v (print version and compile flags) * rpcinfo: Removed a number of "old-style function definition" warnings * man/rpcbind: Update list of options * Comment out ListenStream=@/run/rpcbind.sock * [nfs/nfs-utils/rpcbind] rpcbind: avoid dereferencing NULL from realloc() * systemd/rpcbind.service.in: Add various hardenings options * man/rpcbind: Add Files section to manpage * Moved rpcbind.lock and default configs to /run instead of /var/run * rpcinfo: try connecting using abstract address * Listen on an AF_UNIX abstract address if supported * autotools/systemd: call rpcbind with -w only on enabled warm starts * rpcbind: fix double free in init_transport
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
rpcbind SUSE:Linux Micro 6.1
- Plages de versions concernées
- ECOSYSTEM: < 1.2.9-slfo.1.1_1.1
Mettez à jour vers 1.2.9-slfo.1.1_1.1