CLSA-2026-1777542671 flatpak: Fix of CVE-2026-34079

CVE-2026-34079: prevent arbitrary file deletion via ld.so cache symlink...

CLSA-2025-1741125454 bubblewrap: Fix of CVE-2024-42472

fix CVE-2024-42472 in flatpak by adding --bind-fd and --ro-bind-fd options in in bubblewrap, enabling race-free bind mounts using an OPATH file descriptor instead of a direct path...

CLSA-2025-1740132708 flatpak: Fix of CVE-2023-28100

CVE-2023-28100: fix issue where Flatpak could copy text from Linux virtual console and paste it into command buffer, potentially leading to command execution...