SUSE-SU-2026:3099-1

Details

Description of the patch:

This update for dash fixes the following issues

CVE-2026-31323: arithmetic expansion evaluating INTMAX_MIN / -1 can lead to a signed integer overflow and a denial of service (bsc#1269494).

Affected Packages

dash

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Development Tools 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7

Fixed in:

0.5.11.2-150000.3.9.1

References

ADVISORY

https://bugzilla.suse.com/1269494

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-July/048421.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-31323/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20263099-1/