Ubuntu Security Notice 4951-1 - Anton Lydike discovered that Flatpak did not properly handle special tokens in desktop files. An attacker could use this to specially craft a Flatpak application that could escape sandbox confinement.
0a23b56d1081ab2204a99d50c0d34c135491bf42cf34c1c9d5130145a1870e60