SUSE rpcbind Vulnerabilities Addressed in Recent Updates

SUSE has released updates for rpcbind to address multiple vulnerabilities, including a stack buffer overflow in rpcinfo and several memory leaks. The updates, applicable to SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2, include fixes for unauthenticated oversized allocations and improvements to memory management. The vulnerabilities are rated as moderate in severity. The updates were made available on June 22, 2026, and users are encouraged to apply them to mitigate potential risks. The specific issues addressed include dereferencing NULL pointers and old-style function definition warnings in rpcinfo. These vulnerabilities could potentially be exploited if left unpatched, affecting system stability and security.

Key Points: • SUSE released rpcbind updates addressing multiple vulnerabilities on June 22, 2026. • Key issues include a stack buffer overflow and several memory leaks affecting rpcinfo. • Affected systems include SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2.