Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-31438

Fixed in a distro release EPSS <1%

An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."

Published 2023-06-13 · CVE record · OSV

Products: systemd_project systemd

Distro releases

ReleasePackageFixed in
Chainguardsystemd0
Debian 12systemdno fix
Debian 13systemdno fix
Debian 14systemdno fix
Wolfisystemd0