GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option.
{ "urgency": "not yet assigned" }