Amoffat Sh vulnerabilities

• amoffat sh sh _uid does not drop supplementary groups (incomplete privilege drop) CVE-2026-54552 Fix available 7.9 HighJuly 17, 2026