[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1060845: ghostscript: Add AppArmor profile



Package: ghostscript
Version: 10.0.0~dfsg-11+deb12u3
Severity: wishlist

Please consider shipping an AppArmor profile in the "ghostscript" package.  It
might be prudent to add an AppArmor profile to reduce the potential damage of
Ghostscript bugs because:

1. Ghostscript is commonly used to process untrusted input (e.g. before PDF
   files are sent to a printer).
2. A relatively large number of security vulnerabilities have been found in
   Ghostscript over the years [1].

[1]: https://security-tracker.debian.org/tracker/source-package/ghostscript


-- System Information:
Debian Release: 12.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-17-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages ghostscript depends on:
ii  libc6    2.36-9+deb12u3
ii  libgs10  10.0.0~dfsg-11+deb12u3

ghostscript recommends no packages.

ghostscript suggests no packages.

-- no debconf information


Reply to: