containers/bubblewrap v0.10.0

0.10.0

on GitHub

New features:

• Add the --[ro-]bind-fd option, which can be used to mount a filesystem represented by a file descriptor without time-of-check/time-of-use attacks. This is needed when resolving CVE-2024-42472 (GHSA-7hgv-f2j8-xw87) in Flatpak.

Other changes:

• Fix some confusing syntax in SetupOpFlag (no functional change). (#636)