CVE-2026-31323
Security update for dash
No scoreFix available
This update for dash fixes the following issues
- CVE-2026-31323: arithmetic expansion evaluating INTMAX_MIN / -1 can lead to a signed integer overflow and a denial of service (bsc#1269494).
What each source reports
OSVopenSUSE-SU-2026:11143-1 No score
dash-0.5.13.4-1.1 on GA media
These are all security issues fixed in the dash-0.5.13.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11143-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21301-1 No score
Security update for dash
This update for dash fixes the following issues
- CVE-2026-31323: Fix CVE-2026-31323 INTMAX_MIN / -1 overflow (bsc#1269494).
- executes code even when noexec ("-n") is specified (bsc#1178978).
- Record
openSUSE-SU-2026:21301-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3099-1 No score
Security update for dash
This update for dash fixes the following issues
- CVE-2026-31323: arithmetic expansion evaluating INTMAX_MIN / -1 can lead to a signed integer overflow and a denial of service (bsc#1269494).
- Record
SUSE-SU-2026:3099-1- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-31323 is a vulnerability with no CVSS score yet in dash, published June 29, 2026. No source lists public exploit code. Fixed in dash 0.5.11.2-150000.3.9.1.