Malte Kraus of SUSE

nfs-utils: root-owned files stored in insecure /var/lib/nfs directory

osc: stores downloaded (supposed) RPM in network-controlled filesystem paths

cryptctl: client side password hashing is equivalent to clear text password storage

"easy" permission profile allows everyone execute dumpcap and read all network traffic

chkstat follows untrusted symbolic links