ALAS2023-2023-281


Amazon Linux 2023 Security Advisory: ALAS2023-2023-281
Advisory Released Date: 2023-08-09
Advisory Updated Date: 2023-08-09
Severity: Important

Issue Overview:

An initial fix in Amazon Linux ca-certificates package relating to CVE-2022-23491 did not properly remove root certificates from TrustCor from the root store. (CVE-2023-32803)


Affected Packages:

ca-certificates


Issue Correction:
Run dnf update ca-certificates --releasever 2023.1.20230809 to update your system.

New Packages:
noarch:
    ca-certificates-2023.2.60-1.0.amzn2023.0.2.noarch

src:
    ca-certificates-2023.2.60-1.0.amzn2023.0.2.src