Amazon Linux 2023 Security Advisory: ALAS-2023-297
Advisory Release Date: 2023-08-17 11:20 Pacific
Advisory Updated Date: 2023-08-23 22:30 Pacific
Severity:
Important
Issue Overview:
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. (CVE-2023-37920)
Affected Packages:
ca-certificates
Issue Correction:
Run dnf update ca-certificates --releasever 2023.1.20230823 to update your system.
New Packages:
noarch:
ca-certificates-2023.2.60-1.0.amzn2023.0.3.noarch
src:
ca-certificates-2023.2.60-1.0.amzn2023.0.3.src