Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -a option, which prints file contents in an error message.
{
"binaries": [
{
"binary_version": "1.24.0-1ubuntu3",
"binary_name": "gnustep-base-common"
},
{
"binary_version": "1.24.0-1ubuntu3",
"binary_name": "gnustep-base-doc"
},
{
"binary_version": "1.24.0-1ubuntu3",
"binary_name": "gnustep-base-examples"
},
{
"binary_version": "1.24.0-1ubuntu3",
"binary_name": "gnustep-base-runtime"
},
{
"binary_version": "1.24.0-1ubuntu3",
"binary_name": "libgnustep-base-dev"
},
{
"binary_version": "1.24.0-1ubuntu3",
"binary_name": "libgnustep-base1.24"
},
{
"binary_version": "1.24.0-1ubuntu3",
"binary_name": "libgnustep-base1.24-dbg"
}
],
"availability": "No subscription required"
}