< back to search

gpp_maybe Security update for python-sh
SUSE-SLE-Module-Python3-15-SP7-2026-3422

This update for python-sh fixes the following issues: - CVE-2026-54552: incomplete privilege drop in the _uid option can allow a subprocess to retain parent supplementary groups (bsc#1272424).

  • Release Date
    Jul 30 2026
  • References
    Bugzilla: 1272424
    CVEs: CVE-2026-54552
  • Type
    security
  • Severity
    important

cloud_download Downloads

Python 3 Module 15.7 ppc64le
  • Packages
    python-sh
    Python subprocess interface
    2.0.4-150400.9.6.1 lock src
    python311-sh
    Python subprocess interface
    2.0.4-150400.9.6.1 lock rpm
Python 3 Module 15.7 aarch64
  • Packages
    python-sh
    Python subprocess interface
    2.0.4-150400.9.6.1 lock src
    python311-sh
    Python subprocess interface
    2.0.4-150400.9.6.1 lock rpm
Python 3 Module 15.7 s390x
  • Packages
    python-sh
    Python subprocess interface
    2.0.4-150400.9.6.1 lock src
    python311-sh
    Python subprocess interface
    2.0.4-150400.9.6.1 lock rpm
Python 3 Module 15.7 x86_64
  • Packages
    python-sh
    Python subprocess interface
    2.0.4-150400.9.6.1 lock src
    python311-sh
    Python subprocess interface
    2.0.4-150400.9.6.1 lock rpm