Amazon Linux 2023 Security Advisory: ALAS-2023-281
Advisory Release Date: 2023-08-03 20:26 Pacific
Advisory Updated Date: 2023-08-09 23:15 Pacific
Severity:
Important
Issue Overview:
An initial fix in Amazon Linux ca-certificates package relating to CVE-2022-23491 did not properly remove root certificates from TrustCor from the root store. (CVE-2023-32803)
Affected Packages:
ca-certificates
Issue Correction:
Run dnf update ca-certificates --releasever 2023.1.20230809 to update your system.
New Packages:
noarch:
ca-certificates-2023.2.60-1.0.amzn2023.0.2.noarch
src:
ca-certificates-2023.2.60-1.0.amzn2023.0.2.src