[Debian GNUstep maintainers] Bug#584402: CVE-2010-1457: allows local users to read arbitrary files

[Giuseppe Iuculano]

Package: gnustep-base
Severity: serious
Tags: security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for gnustep-base.

CVE-2010-1457[0]:
| Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local
| users to read arbitrary files via a (1) -c or (2) -a option, which
| prints file contents in an error message.

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1457
    http://security-tracker.debian.org/tracker/CVE-2010-1457

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkwHiBsACgkQNxpp46476aoSYQCdFzeamccrfWPpyjNRJRo8eQ/N
uXQAnjLr/CrQtryRroeEnVZlRwrLsZq+
=fETh
-----END PGP SIGNATURE-----