Rocky Linux 8.8 [CIQ] Security Update: python3-pillow / python3-pillow-debuginfo / python3-pillow-devel / etc (ciqsa-2026_1031)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261031 advisory. This advisory aggregates security fixes for the python-pillow SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2023-50447. Tenable has extracted the preceding...

Rocky Linux 8.6 [CIQ] Security Update: python3-pillow / python3-pillow-debuginfo / python3-pillow-devel / etc (ciqsa-2026_1032)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261032 advisory. This advisory aggregates security fixes for the python-pillow SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-50447. Tenable has extracted the preceding...

CVE-2026-50447

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:04+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 20:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmz3vqncx2q 2026-07-14 22:04:13+00:00| seen|...

CVE-2026-50447 Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability

...

CVE-2026-50447 Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability

...

banner-ad-toolkit (>=0.3.1, <=0.3.2), bcipy (>=1.1.1, <=1.2.0) +63 more potentially affected by CVE-2023-50447 via pillow (4.3.0)

pillow PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - banner-ad-toolkit =0.3.1, =1.1.1, =2.2.0, =1.4.9, =2.0.0, =0.1.0a0, =1.1.0, =0.23.0, =0.2.6, =0.6.0, =2.3.0.18073018, =2.3.6.19012721 and more Sourc...

abracadabra (0.0.6), agilecode-test-tools (>=0.4.0, <=0.5.0) +75 more potentially affected by CVE-2023-50447 via pillow (8.1.0)

pillow PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.6 - agilecode-test-tools =0.4.0, =0.1.1, =0.1.0, =0.11.0, =0.1.0, =0.4.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves:...

9gag-scraper (>=0.0.6, <=0.0.7), agora-community-sdk (>=0.1.7, <=0.1.10) +142 more potentially affected by CVE-2023-50447 via pillow (6.2.2)

pillow PYPI version 6.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 9gag-scraper =0.0.6, =0.1.7, =0.0.1.dev1, =0.1.0, =0.1.0, =1.0.0, =0.26.0.dev2, =0.0.1, =20.1.1, =2.0.0, =3.0.2, =0.16.0, =0.18.2 - colornet 0.2.0 a...

dcicsnovault (>=2.0.0b4, <=4.0.0b2), django-dynamic-scraper (>=0.11.4, <=0.13.1) +12 more potentially affected by CVE-2023-50447 via pillow (3.4.2)

pillow PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =2.0.0b4, =0.11.4, =0.18.1, =0.6.12a2, =0.9.0, =0.2.1, =0.0.3, =1.6.0, =1.4.0, =1.12.0 - yulelog 0.0.3 Source cves: CVE-2023-50447 Sour...

abayestest (>=0.0.2, <=0.0.4), academic-emotion (0.1.2) +517 more potentially affected by CVE-2023-50447 via pillow (>=10.0.0, <=10.1.0)

pillow PYPI version =10.0.0, =0.0.2, =0.0.1, =0.7.1, =0.0.1b0, =0.1.6, =1.1.19, =1.1.2, =0.1.0, =1.7.3, =1.7.5 and more Source cves: CVE-2023-50447 Source advisory: OSV:PYSEC-2026-457...

aioload (0.4.0), amazoncaptcha (0.5.0) +67 more potentially affected by CVE-2023-50447 via pillow (8.0.1)

pillow PYPI version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aioload 0.4.0 - amazoncaptcha 0.5.0 - apricopt =0.0.1a1.dev5, =0.1.0, =0.1.7, =0.1.3, =1.37.0, =1.38.1 - blendedux 0.0.2 and more Source cves:...

3deecelltracker (>=0.5.1a0, <=0.5.2a0), adversarial-attacks-white-black-box (0.1.7) +200 more potentially affected by CVE-2023-50447 via pillow (9.3.0)

pillow PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3deecelltracker =0.5.1a0, =1.5.0rc1, =0.0.3, =22.11.2, =2.6.17, =0.1.0a0, =0.1.0, =0.0.1a1, =0.3.1rc5, =0.8.0, =22.43.1, =22.52.1 and more Source...

active-time-scheduling (>=1.0.0, <=1.0.2), aimfast (>=1.3.0, <=1.3.3) +178 more potentially affected by CVE-2023-50447 via pillow (9.2.0)

pillow PYPI version 9.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - active-time-scheduling =1.0.0, =1.3.0, =2.2.1, =22.7.6, =0.0.29, =20220819.1.0, =0.24.0, =0.5.0, =0.9.1, =0.18.0, =0.19.0 and more Source cves:...

adachi-resource-assistant (>=2.8.0, <=3.0.2), amazon-textract-pipeline-pagedimensions (0.0.6) +84 more potentially affected by CVE-2023-50447 via pillow (9.1.1)

pillow PYPI version 9.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adachi-resource-assistant =2.8.0, =1.0.0, =22.5.20, =0.1.1, =1.66.4, =2.6.14, =22.22.1, =0.6.2, =10.2.0b5, =0.0.1, =2.1.7 and more Source cves:...

3deecelltracker (0.5.0a0), aima (2023.2.4) +60 more potentially affected by CVE-2023-50447 via pillow (9.1.0)

pillow PYPI version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3deecelltracker 0.5.0a0 - aima 2023.2.4 - an-website =22.5.13, =2.4.5, =0.2.4rc1, =22.14.1, =0.0.3, =1.0.1, =0.1.0, =0.0.36, =0.0.39 and more Source...

aebo (>=0.3.0, <=0.9.0), aebo-pi (>=0.1.0, <=0.8.0) +173 more potentially affected by CVE-2023-50447 via pillow (9.0.1)

pillow PYPI version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aebo =0.3.0, =0.1.0, =1.3.0, =1.0.0, =0.4.10, =2.1.0, =0.5.3, =2.6.9, =0.2.3rc4, =1.1.1, =0.5.17, =1.0.0, =22.9.1, =0.3.2b20220226, =0.5.3 and more...

abraia (0.9.4), agave-pyclient (>=1.2.3, <=1.2.4) +78 more potentially affected by CVE-2023-50447 via pillow (9.0.0)

pillow PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abraia 0.9.4 - agave-pyclient =1.2.3, =3.2.0, =0.3.2, =0.23.0, =0.4.0, =0.8.0, =0.1.2, =1.39.0, =1.49.0.post1 and more Source cves: CVE-2023-50447...

arpegio (>=0.1.3, <=0.3.4), django-versatileimagefield (1.6.1) +2 more potentially affected by CVE-2023-50447 via pillow (3.3.3)

pillow PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - arpegio =0.1.3, =0.6.12a3, =0.6.12 Source cves: CVE-2023-50447 Source advisory: OSV:PYSEC-2026-457...

stoqdrivers (2.0.1) potentially affected by CVE-2023-50447 via pillow (3.1.2)

pillow PYPI version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - stoqdrivers 2.0.1 Source cves: CVE-2023-50447 Source advisory: OSV:PYSEC-2026-457...

dcicsnovault (>=3.1.6, <=4.2.0.0b0) potentially affected by CVE-2023-50447 via pillow (3.1.1)

pillow PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =3.1.6, =4.2.0.0b0 Source cves: CVE-2023-50447 Source advisory: OSV:PYSEC-2026-457...