Location disclosure via insufficient bootp log redaction

Information disclosure in Apple operating systems allows local users to read sensitive location data through the bootp component. Bootp writes location information into log entries without sufficient private-data redaction, leaving the data accessible to an app. Exploitation requires user interaction to run an app locally, and the documented consequence is limited to location-data disclosure.