Matthias Gerstner of SUSE

sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline

sdbootutil: world-readable debug log

User-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges

cups: ownership of /var/log/cups allows the lp user to create files as root

Local File Deletion Attack Vector in rm_rf() in seunshare

Process Kill Attack Vector in killall() in seunshare

portprotonqt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager

Caching of Authentication allows Authentication Bypass between users in qSnapper

Caching of Authentication allows Authentication Bypass in qSnapper

Information leak via “diff” methods in qSnapper