Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -a option, which prints file contents in an error message.
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "gnustep-base-common", "binary_version": "1.24.0-1ubuntu3" }, { "binary_name": "gnustep-base-doc", "binary_version": "1.24.0-1ubuntu3" }, { "binary_name": "gnustep-base-examples", "binary_version": "1.24.0-1ubuntu3" }, { "binary_name": "gnustep-base-runtime", "binary_version": "1.24.0-1ubuntu3" }, { "binary_name": "libgnustep-base-dev", "binary_version": "1.24.0-1ubuntu3" }, { "binary_name": "libgnustep-base1.24", "binary_version": "1.24.0-1ubuntu3" }, { "binary_name": "libgnustep-base1.24-dbg", "binary_version": "1.24.0-1ubuntu3" } ] }