debian/Use-Python-3-for-test-web-server.patch
CVE-2021-21261-1.patch
CVE-2021-21261-2.patch
CVE-2021-21261-3.patch
CVE-2021-21261-4.patch
CVE-2021-21261-5.patch
CVE-2021-21381-1.patch
CVE-2021-21381-2.patch
CVE-2021-21381-3.patch
CVE-2021-41133-1.patch
CVE-2021-41133-2.patch
CVE-2021-41133-3.patch
CVE-2021-41133-4.patch
CVE-2021-41133-5.patch
CVE-2021-41133-6.patch
CVE-2021-41133-7.patch
CVE-2021-41133-8.patch
CVE-2021-41133-9.patch
CVE-2021-41133-10.patch
CVE-2026-34079.patch
# CVE-2026-34078 not fixed on bionic: the fix requires bwrap >= 0.4.0 for
# --ro-bind-fd / --bind-fd support, but bionic only has bwrap 0.2.1.
# Applying the patches would break ALL flatpak runs on bionic.
# Bionic remains vulnerable to CVE-2026-34078 via the portal's
# sandbox_expose / sandbox_expose_ro path-based options.
