Bug 2532858 (CVE-2023-32803) - CVE-2023-32803 ca-certificates: ca-certificates: Failure to remove TrustCor root certificates
Summary: CVE-2023-32803 ca-certificates: ca-certificates: Failure to remove TrustCor r...
Keywords:
Status: NEW
Alias: CVE-2023-32803
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-14 05:01 UTC by OSIDB Bzimport
Modified: 2026-09-14 09:20 UTC (History)
15 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-14 05:01:28 UTC 
The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491.
Note You need to log in before you can comment on or make changes to this bug.