- Package:
- ghostscript
- Source:
- ghostscript
- Description:
- interpreter for the PostScript language and for PDF
- Submitter:
- Sam Lee
- Date:
- 2024-01-15 14:57:03 UTC
- Severity:
- normal
Please consider shipping an AppArmor profile in the "ghostscript" package. It might be prudent to add an AppArmor profile to reduce the potential damage of Ghostscript bugs because: 1. Ghostscript is commonly used to process untrusted input (e.g. before PDF files are sent to a printer). 2. A relatively large number of security vulnerabilities have been found in Ghostscript over the years [1]. [1]: https://security-tracker.debian.org/tracker/source-package/ghostscript