Matthias Gerstner of SUSE

A crafted "interface" input parameter can lead to integrity loss of the firewall configuration

Lack of client authorization allows arbitrary users to influence the firewall configuration

Local users can perform a local root exploit via smb4k mounthelper

Local users can perform arbitrary unmounts via smb4k mount helper due to lack of input validation

Local File Deletion Attack Vector in rm_rf() in seunshare

Process Kill Attack Vector in killall() in seunshare

portprotonqt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager

Caching of Authentication allows Authentication Bypass between users in qSnapper

Caching of Authentication allows Authentication Bypass in qSnapper

Information leak via “diff” methods in qSnapper