CVE-2026-54552

sh provides Python process launching. Prior to 2.2.4, the uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs from an elevated process and launches a command with uid set to an unprivileged user, the child changes its UID but can retain the paren...

openSUSE 16 Security Update : python-sh (openSUSE-SU-2026:21516-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21516-1 advisory. This update for python-sh fixes the following issue - CVE-2026-54552: uid option performs an incomplete privilege drop on Linux/Unix-like systems and...

SUSE-SU-2026:23134-1 Security update for python-sh

This update for python-sh fixes the following issue - CVE-2026-54552: uid option performs an incomplete privilege drop on Linux/Unix-like systems and allows for privilege escalation bsc1272424...

SUSE-SU-2026:23112-1 Security update for python-sh

This update for python-sh fixes the following issue - CVE-2026-54552: uid option performs an incomplete privilege drop on Linux/Unix-like systems and allows for privilege escalation bsc1272424...

OPENSUSE-SU-2026:21516-1 Security update for python-sh

This update for python-sh fixes the following issue - CVE-2026-54552: uid option performs an incomplete privilege drop on Linux/Unix-like systems and allows for privilege escalation bsc1272424...

SUSE SLED15 / SLES15 Security Update : python-sh (SUSE-SU-2026:3422-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3422-1 advisory. - CVE-2026-54552: incomplete privilege drop in the uid option can allow a subprocess to retain parent supplementary...