Skip to content
OpenAdvisories
High ALAS2023-2023-281 1 CVE

Important: ca-certificates security update (Amazon Linux 2023)

Published Aug 3, 2023 · Updated Aug 9, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-32803: An initial fix in Amazon Linux ca-certificates package relating to CVE-2022-23491 did not properly remove root certificates from TrustCor from the root store.

Fixed packages 1

ReleasePackageFixed in
Amazon Linux · 2023 ca-certificates 0:2023.2.60-1.0.amzn2023.0.2

Vulnerabilities 1

  • High 7.5
    CVE-2023-32803

    The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certa…

    amazon ca-certificates

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-32803.html