GitLab

- add CVE numbers to secfixes list
- align patch

Although riscv64 should be supported it fails to build, disable for now.

../deps/v8/src/codegen/riscv64/macro-assembler-riscv64.h:222:8: error: 'void v8::internal::TurboAssembler::JumpCodeObject(v8::internal::Register)' marked 'override', but does not override
  222 |   void JumpCodeObject(Register code_object) override;

https://github.com/nodejs/node/pull/37980

* https://github.com/docker/buildx/releases/tag/v0.5.1
* https://docs.docker.com/buildx/working-with-buildx

Resolves #10813

This way people can only install what they need. E.g. if you don't use
Pipewire as a Pulse replacement, you won't need -zeroconf either. But
not everybody using Pipewire as a Pulse replacement will need -zeroconf

Also, autostart -media-session. Since we don't ship systemd this needs
patching the config before we install it