ArchLinux: 201705-3: ghostscript: arbitrary command execution
Summary
It was found that ghostscript did not properly validate the parameters passed to the .rsdparams and .eqproc functions. During its execution, a specially crafted PostScript document could execute code via a "/OutputFile (%pipe%" substring in the context of the ghostscript process, bypassing the -dSAFER protection.
Resolution
Upgrade to 9.21-2.
# pacman -Syu "ghostscript>=9.21-2"
The problem has been fixed upstream but no release is available yet.
References
https://bugs.ghostscript.com/show_bug.cgi?id=697808 https://security.archlinux.org/CVE-2017-8291
Workaround
None.