Red Hat would like to thank Andreas Gabriel Berbescu for reporting this issue.

Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection

Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username

Networkmanager-fortisslvpn: networkmanager-fortisslvpn: local privilege escalation to root via crlf injection in vpn profile credentials

Networkmanager-sstp: networkmanager-sstp: local privilege escalation to root via shell injection in vpn profile fields

Networkmanager-iodine: networkmanager-iodine: local privilege escalation to root via nameserver option injection