Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -a option, which prints file contents in an error message.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.24.0-1ubuntu3", "binary_name": "gnustep-base-common" }, { "binary_version": "1.24.0-1ubuntu3", "binary_name": "gnustep-base-doc" }, { "binary_version": "1.24.0-1ubuntu3", "binary_name": "gnustep-base-examples" }, { "binary_version": "1.24.0-1ubuntu3", "binary_name": "gnustep-base-runtime" }, { "binary_version": "1.24.0-1ubuntu3", "binary_name": "libgnustep-base-dev" }, { "binary_version": "1.24.0-1ubuntu3", "binary_name": "libgnustep-base1.24" }, { "binary_version": "1.24.0-1ubuntu3", "binary_name": "libgnustep-base1.24-dbg" } ] }