The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491.Referenceshttps://alas.aws.amazon.com/AL2/ALAS-2023-1957.htmlhttps://explore.alas.aws.amazon.com/CVE-2023-32803.html