CVE-2026-4802: fix shell command injection via boot descriptor query string in the system logs page by quoting journalctl arguments using shlex-style single- quote escaping
CVE-2024-6126: fix insecure killing of session ssh-agent; include upstream follow-up commit for proper strtoul() error handling when parsing SSH_AGENT_PID