CVE-2017-8291漏洞信息： Amazon Linux Security Advisory for ghostscript: ALAS-2017-837

It was found that ghostscript did not properly validate the parameters passed
to the .rsdparams and .eqproc functions. During its execution, a specially
crafted PostScript document could execute code in the context of the ghostscript
process, bypassing the -dSAFER protection. (CVE-2017-8291 )

Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.

Please refer to Amazon advisory ALAS-2017-837 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

ALAS-2017-837: Amazon Linux (ghostscript (8.70-23.25.amzn1) on i686)

ALAS-2017-837: Amazon Linux (ghostscript (8.70-23.25.amzn1) on x86_64)

ALAS-2017-837: Amazon Linux (ghostscript (8.70-23.25.amzn1) on src)