This is an "old-stable" release for long-term-support distributions, backporting the security fix from 1.14.6. If possible, please use the latest stable branch (1.14.x) instead.

Security fixes:

• Don't allow an executable name to be misinterpreted as a command-line
  option for bwrap(1). This prevents a sandbox escape where a malicious
  or compromised app could ask xdg-desktop-portal to generate a .desktop
  file with access to files outside the sandbox. (CVE-2024-32462)

b69ba4c66c6423a3f9ec17ede157ce11d421a72d642f65788ad7e86811146974 *flatpak-1.12.9.tar.xz