CLSA-2026-1789993475 Fix CVE(s): CVE-2023-44271, CVE-2023-50447

SECURITY UPDATE: arbitrary code execution via the ImageMath.eval environment parameter ELSCVE-187962 - debian/patches/CVE-2023-50447.patch: reject environment keys that contain "" or shadow a builtin before they are merged into the execution namespace in src/PIL/ImageMath.py, so an injected name...