Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -a option, which prints file contents in an error message.
{
"binaries": [
{
"binary_name": "gnustep-base-common",
"binary_version": "1.24.0-1ubuntu3"
},
{
"binary_name": "gnustep-base-doc",
"binary_version": "1.24.0-1ubuntu3"
},
{
"binary_name": "gnustep-base-examples",
"binary_version": "1.24.0-1ubuntu3"
},
{
"binary_name": "gnustep-base-runtime",
"binary_version": "1.24.0-1ubuntu3"
},
{
"binary_name": "libgnustep-base-dev",
"binary_version": "1.24.0-1ubuntu3"
},
{
"binary_name": "libgnustep-base1.24",
"binary_version": "1.24.0-1ubuntu3"
},
{
"binary_name": "libgnustep-base1.24-dbg",
"binary_version": "1.24.0-1ubuntu3"
}
],
"availability": "No subscription required"
}