Bug 1046268 - USB Keys are mis-identified by device notifier
Summary: USB Keys are mis-identified by device notifier
Status: RESOLVED FIXED
: 1046096 1049760 1051940 1053169 1054629 1055887 (view as bug list)
Alias: None
Product: openSUSE Tumbleweed
Classification: openSUSE
Component: KDE Workspace (Plasma) (show other bugs)
Version: Current
Hardware: Other Other
: P5 - None : Normal (vote)
Target Milestone: ---
Assignee: systemd maintainers
QA Contact: E-mail List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-06-27 20:18 UTC by Lucifer Watson
Modified: 2023-04-06 08:55 UTC (History)
13 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments
Output of udisksctl info -b /dev/sdb1 (2.08 KB, text/plain)
2017-06-28 09:41 UTC, Lucifer Watson
Details
Output of udevadm info -e /dev/sdb (191.05 KB, text/plain)
2017-07-06 09:41 UTC, Lucifer Watson
Details
Output of udevadm info -e /dev/sdb1 (191.05 KB, text/plain)
2017-07-06 09:42 UTC, Lucifer Watson
Details
Output of blkid (630 bytes, text/plain)
2017-07-06 11:30 UTC, Lucifer Watson
Details
Output of wipefs -n /dev/sdb (281 bytes, text/plain)
2017-07-06 11:31 UTC, Lucifer Watson
Details
Output of wipefs -n /dev/sdb1 (234 bytes, text/plain)
2017-07-06 11:32 UTC, Lucifer Watson
Details
Output of grep (14.18 KB, text/plain)
2017-07-06 11:33 UTC, Lucifer Watson
Details
Output of udevadm after reloading rules (2.50 KB, text/plain)
2017-07-06 12:21 UTC, Lucifer Watson
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Lucifer Watson 2017-06-27 20:18:43 UTC
When plugging in a USB key it is misidentified by the device notifier.

The key is labelled as "keyring" and is formatted to ext4. It is identified as "Kubuntu 14.04.amd64" and it cannot be mounted. This key was previously used as a Kubuntu install disk.

Manually mounting the key from the terminal works as expected. After plugging in the key dmesg shows:

$ > dmesg | tail
[42393.585512] scsi host5: usb-storage 3-1:1.0
[42394.593334] scsi 5:0:0:0: Direct-Access     SanDisk  Cruzer Facet     1.26 PQ: 0 ANSI: 5
[42394.593566] sd 5:0:0:0: Attached scsi generic sg2 type 0
[42394.594585] sd 5:0:0:0: [sdb] 15633408 512-byte logical blocks: (8.00 GB/7.45 GiB)
[42394.595374] sd 5:0:0:0: [sdb] Write Protect is off
[42394.595376] sd 5:0:0:0: [sdb] Mode Sense: 43 00 00 00
[42394.595618] sd 5:0:0:0: [sdb] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
[42394.607771]  sdb: sdb1
[42394.609109] sd 5:0:0:0: [sdb] Attached SCSI removable disk
[42394.805763] ISOFS: Unable to identify CD-ROM format.
Comment 1 Luca Beltrame 2017-06-28 09:28:39 UTC
I saw this issue yesterday. Apparently udisks mis-identifies the stick as an ISO-9660 volume.

Can you try pasting the output of udisksctl info -b <partition> ?
Comment 2 Lucifer Watson 2017-06-28 09:41:49 UTC
Created attachment 730531 [details]
Output of udisksctl info -b /dev/sdb1
Comment 3 Luca Beltrame 2017-06-28 10:12:21 UTC
Comment on attachment 730531 [details]
Output of udisksctl info -b /dev/sdb1

> IdType:                     iso9660

Looks like it's being mis-identified.
Comment 4 Luca Beltrame 2017-06-28 10:22:16 UTC
It looks to me like a possible issue with udisks, which is used by Solid to query for the capabilities of the disk. udisksctl mount in fact fails in the same way. 

Reassigning.
Comment 5 Pierre Bonamy 2017-06-29 01:39:31 UTC
Most likely a problem in the partition table and formatting of the key see the duplicate here:
https://bugzilla.opensuse.org/show_bug.cgi?id=1046096
Comment 6 Pierre Bonamy 2017-06-29 01:43:24 UTC
*** Bug 1046096 has been marked as a duplicate of this bug. ***
Comment 7 Andrei Borzenkov 2017-07-06 04:30:11 UTC
(In reply to Luca Beltrame from comment #4)
> It looks to me like a possible issue with udisks,

The only way I can reproduce this behavior is when I do *NOT* create filesystem on partition. Then filesystem on this partition gets misidentified (due to udev properties inherited by partition from containing block device). If I create filesystem on partition, it is also correctly shown by udev. and udiskctl

Neither of these bugs reports contains actual instructions how to reproduce it. Please provide exact steps how to do it on command line showing exact commands (or better capturing the whole session).

Of course the problem of leaked properties should be fixed too. In particular it means partition inherits iso9660 label unless it is explicitly set in partition filesystem. But it still *is* mounted here on XFCE.
Comment 8 Pierre Bonamy 2017-07-06 04:42:48 UTC
Andrei, what information is missing from #1046096 for you to reproduce? Gparted being a GUI, provide command lines is tricky as I don't know how to use parted in CLI... All the described steps are straightforward, but I can be more thorough if you want:
- by "remove partitions", I mean select each partition and click on "Delete the partition", until they are all removed
- by "create a new one", I mean click on "Partition" > "New" > Select "fat32" as the partition type and enter "MYLABEL" in the label text field, then click on OK
- after all that, apply the changes (click on "Apply all operations").

Incidentally, have you tried to reproduce on KDE Plasma? Both bugs are reported within KDE Plasma. Since the buggy USB drives can be mounted using a "mount" command, there is a way to mount them. Should XFCE uses such a "working" way, it would not be sensitive to the bug.
Comment 9 Thomas Blume 2017-07-06 06:44:56 UTC
(In reply to Pierre Bonamy from comment #8)
> 
> Incidentally, have you tried to reproduce on KDE Plasma? Both bugs are
> reported within KDE Plasma. Since the buggy USB drives can be mounted using
> a "mount" command, there is a way to mount them. Should XFCE uses such a
> "working" way, it would not be sensitive to the bug.

AFAIK, udisks2 is taking filesystem information from udev.
Can you attach the udev information from your usb key, e.g. the output of:

udevadm info -e

for the device and its partitions?
Comment 10 Lucifer Watson 2017-07-06 09:41:52 UTC
Created attachment 731366 [details]
Output of udevadm info -e /dev/sdb
Comment 11 Lucifer Watson 2017-07-06 09:42:42 UTC
Created attachment 731367 [details]
Output of udevadm info -e /dev/sdb1
Comment 12 Pierre Bonamy 2017-07-06 10:30:51 UTC
I've uploaded the output of udevadm info -e on the other bug report to keep things clear:
https://bugzilla.suse.com/show_bug.cgi?id=1046096
Comment 13 Andrei Borzenkov 2017-07-06 10:37:42 UTC
What is the output of

blkid
wipefs -n /dev/sdb
wipefs -n /dev/sdb1
Comment 14 Pierre Bonamy 2017-07-06 10:43:45 UTC
For me:

> blkid
/dev/sda1: SEC_TYPE="msdos" UUID="307F-1D79" TYPE="vfat" PARTLABEL="primary" PARTUUID="4d69599c-ff06-4188-988e-44ca03f77865"
/dev/sda2: UUID="ddb6812e-a1b4-4032-af68-10a22f7b00a3" TYPE="swap" PARTLABEL="primary" PARTUUID="a0188e55-538f-4faf-b795-39672d790c03"
/dev/sda3: UUID="83d1803d-f689-4f8e-9e5a-9dafb7e922bd" UUID_SUB="602cd6bc-b828-4635-8f35-d5e716ab76d0" TYPE="btrfs" PARTLABEL="primary" PARTUUID="f5842396-62ac-467c-a9d6-7b379fc42be1"
/dev/sda4: UUID="4e4d64ab-7346-4e90-9148-f5746d833c8f" TYPE="ext4" PARTLABEL="primary" PARTUUID="2dbcc165-5027-449f-85b3-54181e4d04c3"
/dev/sda5: UUID="f93d5edc-5a08-47f6-8f29-0b083addd4f0" TYPE="ext4" PARTLABEL="primary" PARTUUID="0dc56eec-5efd-4701-9d44-9b130701ac60"
/dev/sdb1: LABEL="EMTEC" UUID="AB71-6E1E" TYPE="vfat" PARTUUID="5d2e2084-01"

> wipefs -n /dev/sdb
offset               type
----------------------------------------------------------------
0x1fe                dos   [table de partitions]

0x8001               iso9660   [filesystem]
                     LABEL: openSUSE-Leap-42.2-NET-x86_64028
                     UUID:  2016-11-09-10-10-35-00

> sudo wipefs -n /dev/sdb1
offset               type
----------------------------------------------------------------
0x52                 vfat   [filesystem]
                     LABEL: EMTEC
                     UUID:  AB71-6E1E
Comment 15 Andrei Borzenkov 2017-07-06 11:08:54 UTC
I suspect that we have some udev rule that imports parent properties *after* device was probed; so values are overridden. As I do not see this problem it may be installed by some additional package. Could you run "grep -i import /usr/lib/udev/rules.d /etc/udev/rules.d" and upload output?
Comment 16 Andrei Borzenkov 2017-07-06 11:17:26 UTC
(In reply to Andrei Borzenkov from comment #15)
>grep -i import

grep -ir import of course.
Comment 17 Lucifer Watson 2017-07-06 11:30:42 UTC
Created attachment 731396 [details]
Output of blkid
Comment 18 Lucifer Watson 2017-07-06 11:31:44 UTC
Created attachment 731397 [details]
Output of wipefs -n /dev/sdb
Comment 19 Lucifer Watson 2017-07-06 11:32:22 UTC
Created attachment 731398 [details]
Output of wipefs -n /dev/sdb1
Comment 20 Lucifer Watson 2017-07-06 11:33:02 UTC
Created attachment 731399 [details]
Output of grep
Comment 21 Andrei Borzenkov 2017-07-06 12:03:44 UTC
Well, /usr/lib/udev/rules.d/61-persistent-storage-compat.rules comes after rule that imports blkid properties. Which package it belongs? You can try to disable it with "touch /etc/udev/rules.d/1-persistent-storage-compat.rules" then "udevadm control --reload-rules" or simply reboot.
Comment 22 Lucifer Watson 2017-07-06 12:08:54 UTC
That made no difference. It is still identified as Kubuntu 15.04
Comment 23 Lucifer Watson 2017-07-06 12:10:23 UTC
I meant to add that it still only mounts manually.
Comment 24 Andrei Borzenkov 2017-07-06 12:16:20 UTC
(In reply to Lucifer Watson from comment #23)
> I meant to add that it still only mounts manually.

Did you reboot? What is the output of "udevadm info -q all -n /dev/sdb1"?
Comment 25 Lucifer Watson 2017-07-06 12:20:39 UTC
No. I just reloaded the rules. I'll attach the requested details but I can't reboot at the moment so I'll try that later
Comment 26 Lucifer Watson 2017-07-06 12:21:27 UTC
Created attachment 731408 [details]
Output of udevadm after reloading rules
Comment 27 Andrei Borzenkov 2017-07-06 12:40:41 UTC
(In reply to Lucifer Watson from comment #25)
> No. I just reloaded the rules.

But did you reinsert USB stick so they are applied again to new device?
Comment 28 Lucifer Watson 2017-07-06 13:32:27 UTC
> But did you reinsert USB stick so they are applied again to new device?

Yes.
Comment 29 Andrei Borzenkov 2017-07-06 17:05:41 UTC
(In reply to Andrei Borzenkov from comment #21)
> /usr/lib/udev/rules.d/61-persistent-storage-compat.rules

I reproduced it now and yes, commenting out

ENV{DEVTYPE}=="partition", IMPORT{parent}="ID_*"

does fix it.

Of course, it still leaks label and probably some other stuff (I did not check exactly).

It really should be more careful and import only those properties it actually needs.
Comment 30 Andrei Borzenkov 2017-07-06 17:07:52 UTC
(In reply to Andrei Borzenkov from comment #29)
> 
> It really should be more careful and import only those properties it
> actually needs.

Actually why it needs to import *anytying* in the first place? Everything has just been imported in 60-persistent-storage.rules.
Comment 31 Lucifer Watson 2017-07-06 20:04:25 UTC
(In reply to Andrei Borzenkov from comment #29)
> commenting out
> 
> ENV{DEVTYPE}=="partition", IMPORT{parent}="ID_*"
> 
> does fix it.


Yes that fixed it after reloading the rules.
Comment 32 Pierre Bonamy 2017-07-06 22:48:51 UTC
Commenting this line out fixes the following for me:
- Label is now seen correctly by KDE/Plasma
- The USB stick can be mounted in KDE/Plasma

It doesn't fix the following:
- Gparted still see the partitions as iso9660 with the old label
Comment 33 Mark Hounschell 2017-08-02 17:20:44 UTC
I can verify that this bug is also present in Leap 42.3. Leap 42.2 does not have this issue.
Comment 34 Wolfgang Bauer 2017-08-02 18:05:25 UTC
*** Bug 1051940 has been marked as a duplicate of this bug. ***
Comment 35 Forgotten User Psps0G7_wp 2017-08-03 00:24:21 UTC
(In reply to Mark Hounschell from comment #33)
> I can verify that this bug is also present in Leap 42.3. Leap 42.2 does not
> have this issue.

Then its a DIFFERENCE in the rules between 42.2 and 42.3.

As such, I'm not sure that this constitutes a bug when it's a difference in the installed configuration.  Both rules make sense.

Yes, its an inconsistency, but it could be argued that 42.3 was correcting an error in 42.2.

I've looked at my  hard disk which is outside the rules and OBVIOUSLY I get different results if I run blkid on /dev/sda and /ded/sda1.

Which is as it should be.

Inconsistency between releases that constituent corrections are sometimes a matter of opinion.

Let me ask an awkward question.

My main drive that my system is installed on, the 1Terabyte SATA, has three partitions.   I could equally buy a 1T  USB drive and format that with three, or more, partitions.  When I plug that in that partition should the KDE popup select?  

Whichever one, it might not be the one I want and hence it is "misidentified by the device notifier".
In this case, recognizing the device makes sense.
Comment 36 Mark Hounschell 2017-08-03 13:07:29 UTC
I can also confirm that a recent update to Leap 42.2 has also created this problem on Leap 42.2.
Comment 37 Mark Hounschell 2017-08-04 12:02:57 UTC
Anton,

"Let me ask an awkward question.

My main drive that my system is installed on, the 1Terabyte SATA, has three partitions.   I could equally buy a 1T  USB drive and format that with three, or more, partitions.  When I plug that in that partition should the KDE popup select?"

It should show ALL of them (/dev/sdX#). No matter what /dev/sdX says.
Comment 38 Lucifer Watson 2017-08-04 12:35:20 UTC
(In reply to Anton Aylward from comment #35)
> Let me ask an awkward question.
> 
> My main drive that my system is installed on, the 1Terabyte SATA, has three
> partitions.   I could equally buy a 1T  USB drive and format that with
> three, or more, partitions.  When I plug that in that partition should the
> KDE popup select?  
> 
> Whichever one, it might not be the one I want and hence it is "misidentified
> by the device notifier".
> In this case, recognizing the device makes sense.

Let me ask you an awkward question:

Would you expect the 1T USB drive to be correctly identified and mounted or not?
Comment 39 Forgotten User Psps0G7_wp 2017-08-04 13:11:35 UTC
(In reply to Lucifer Watson from comment #38)
> (In reply to Anton Aylward from comment #35)
> > Let me ask an awkward question.
> > 
> > My main drive that my system is installed on, the 1Terabyte SATA, has three
> > partitions.   I could equally buy a 1T  USB drive and format that with
> > three, or more, partitions.  When I plug that in that partition should the
> > KDE popup select?  
> > 
> > Whichever one, it might not be the one I want and hence it is "misidentified
> > by the device notifier".
> > In this case, recognizing the device makes sense.
> 
> Let me ask you an awkward question:
> 
> Would you expect the 1T USB drive to be correctly identified and mounted or
> not?

You don't mount a DRIVE, you mount a partition.

Let us assume that the rules identify it as a USB drive.
in order to mount a partition it has to determine the partition table entries, gpt or whatever.  if there is more than one partition then a selection of which partition to use has to be made.

I repeat, you don't mount a drive, you mount a partition.
(or, if you're using LVM a LV, but lets not make this more complicated than it has to be)

I think that this has already been answered, the popup offers the user a choice, its not an automated decision.
Comment 40 Wolfgang Bauer 2017-08-04 13:34:27 UTC
(In reply to Anton Aylward from comment #39)
> You don't mount a DRIVE, you mount a partition.

I don't think your comments are helpful here at all.

Of course you normally mount a partition.
But the problem in this bug report is that the device notifier doesn't show any partitions because the drive is misidentified as CD by udisks2.
Comment 41 Lucifer Watson 2017-08-04 13:53:05 UTC
(In reply to Anton Aylward from comment #39)
> (In reply to Lucifer Watson from comment #38)
> > (In reply to Anton Aylward from comment #35)
> > > Let me ask an awkward question.
> > > 
> > > My main drive that my system is installed on, the 1Terabyte SATA, has three
> > > partitions.   I could equally buy a 1T  USB drive and format that with
> > > three, or more, partitions.  When I plug that in that partition should the
> > > KDE popup select?  
> > > 
> > > Whichever one, it might not be the one I want and hence it is "misidentified
> > > by the device notifier".
> > > In this case, recognizing the device makes sense.
> > 
> > Let me ask you an awkward question:
> > 
> > Would you expect the 1T USB drive to be correctly identified and mounted or
> > not?
> 
> You don't mount a DRIVE, you mount a partition.
> 
> Let us assume that the rules identify it as a USB drive.
> in order to mount a partition it has to determine the partition table
> entries, gpt or whatever.  if there is more than one partition then a
> selection of which partition to use has to be made.
> 
> I repeat, you don't mount a drive, you mount a partition.
> (or, if you're using LVM a LV, but lets not make this more complicated than
> it has to be)
> 
> I think that this has already been answered, the popup offers the user a
> choice, its not an automated decision.

I plug in my USB key with the line <ENV{DEVTYPE}=="partition", IMPORT{parent}="ID_*"> in the file /usr/lib/udev/rules.d/61-persistent-storage-compat.rules uncommented and the device is mis-identified and not mounted. See the image below.

https://i.imgur.com/5OTuz0f.png

I comment out that line and reload the rules then plug in the same key and voilà! it is recognised and mounted correctly. See the image below.

https://i.imgur.com/r8kIVrp.png

If a repeatable and consistent error doesn't match your definition of a bug, could you please explain what does.
Comment 42 Thomas Blume 2017-08-04 13:56:46 UTC
(In reply to Wolfgang Bauer from comment #40)
> But the problem in this bug report is that the device notifier doesn't show
> any partitions because the drive is misidentified as CD by udisks2.

The udisks2 issue should be fixed by comment#29. Can you confirm?
But I doubt that udisks2 has any influnce on gparted.
The issue reported in comment#32 is most probably caused by udev.
Comment 43 Lucifer Watson 2017-08-04 14:03:59 UTC
(In reply to Thomas Blume from comment #42)
> (In reply to Wolfgang Bauer from comment #40)
> > But the problem in this bug report is that the device notifier doesn't show
> > any partitions because the drive is misidentified as CD by udisks2.
> 
> The udisks2 issue should be fixed by comment#29. Can you confirm?
> But I doubt that udisks2 has any influnce on gparted.
> The issue reported in comment#32 is most probably caused by udev.

Yes, you comment out the line and things work in my case. But it only works until an update replaces the file, thus I wouldn't consider it a fix, more a work-around
Comment 44 Mark Hounschell 2017-08-04 14:23:46 UTC
(In reply to Thomas Blume from comment #42)
> (In reply to Wolfgang Bauer from comment #40)
> > But the problem in this bug report is that the device notifier doesn't show
> > any partitions because the drive is misidentified as CD by udisks2.
> 
> The udisks2 issue should be fixed by comment#29. Can you confirm?

I can confirm that it fixes the issue on Leap 42.3 and a recently updated Leap 42.2 but I have no TW installation to test it on.
Comment 45 Thomas Blume 2017-08-04 14:47:51 UTC
(In reply to Mark Hounschell from comment #44)
> (In reply to Thomas Blume from comment #42)
> > (In reply to Wolfgang Bauer from comment #40)
> > > But the problem in this bug report is that the device notifier doesn't show
> > > any partitions because the drive is misidentified as CD by udisks2.
> > 
> > The udisks2 issue should be fixed by comment#29. Can you confirm?
> 
> I can confirm that it fixes the issue on Leap 42.3 and a recently updated
> Leap 42.2 but I have no TW installation to test it on.


/usr/lib/udev/rules.d/61-persistent-storage-compat.rules

is shipped by the udev package and udev is part of systemd, reassigning accordingly.
Comment 46 Thomas Hopp 2017-08-23 09:20:34 UTC
*** Bug 1053169 has been marked as a duplicate of this bug. ***
Comment 47 Wolfgang Bauer 2017-08-23 09:56:26 UTC
*** Bug 1054629 has been marked as a duplicate of this bug. ***
Comment 48 Thomas Blume 2017-08-29 08:36:03 UTC
*** Bug 1055887 has been marked as a duplicate of this bug. ***
Comment 49 Franck Bui 2017-08-29 09:32:46 UTC
(In reply to Andrei Borzenkov from comment #30)
> Actually why it needs to import *anytying* in the first place? Everything
> has just been imported in 60-persistent-storage.rules.

It's just wrong and boggus...

It was initially done because 61-persistent-storage-compat.rules had a different name and was applied before 60-persistent-storage.rules.

But once it switched to 61-persistent-storage-compat.rules filename, the rule should have been dropped.

Currently 61-persistent-storage-compat.rules only uses ID_BUS which is normally already set by 60-persistent-storage.rules. Therefore dropping the "import anything" rule like you suggested should be the correct fix.

I'll fix it and release a new update ASAP.

Thanks all for spotting and sorting this out.
Comment 50 Franck Bui 2017-08-30 12:12:02 UTC
*** Bug 1049760 has been marked as a duplicate of this bug. ***
Comment 53 Franck Bui 2017-08-31 13:31:15 UTC
The fix has been submitted to both Factory and SLE and should be released pretty quickly. therefore closing.

Again thanks all for spotting and finding the culprit and sorry for the troubles.
Comment 54 Swamp Workflow Management 2017-09-01 19:08:33 UTC
SUSE-RU-2017:2330-1: An update that has 5 recommended fixes can now be installed.

Category: recommended (important)
Bug References: 1045384,1045987,1046268,1047379,1048605
CVE References: 
Sources used:
SUSE Linux Enterprise Software Development Kit 12-SP3 (src):    systemd-228-150.15.2
SUSE Linux Enterprise Software Development Kit 12-SP2 (src):    systemd-228-150.15.2
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src):    systemd-228-150.15.2
SUSE Linux Enterprise Server 12-SP3 (src):    systemd-228-150.15.2
SUSE Linux Enterprise Server 12-SP2 (src):    systemd-228-150.15.2
SUSE Linux Enterprise Desktop 12-SP3 (src):    systemd-228-150.15.2
SUSE Linux Enterprise Desktop 12-SP2 (src):    systemd-228-150.15.2
SUSE Container as a Service Platform ALL (src):    systemd-228-150.15.2
OpenStack Cloud Magnum Orchestration 7 (src):    systemd-228-150.15.2
Comment 55 Forgotten User DjcOQHkgwr 2017-09-05 14:11:52 UTC
As far as I can see, no new version has appeared in opensuse 42.3 to solve this problem. Is this normal ?
Comment 56 Wolfgang Bauer 2017-09-05 14:58:51 UTC
(In reply to François Valenduc from comment #55)
> As far as I can see, no new version has appeared in opensuse 42.3 to solve
> this problem. Is this normal ?

Yes.
It needed to be released for SLE first, that's the normal workflow for packages coming from SLE.

An update for Leap is running now and should get released in the next days:
https://build.opensuse.org/project/show/openSUSE:Maintenance:7229
Comment 57 Swamp Workflow Management 2017-09-06 01:09:07 UTC
openSUSE-RU-2017:2365-1: An update that has 5 recommended fixes can now be installed.

Category: recommended (important)
Bug References: 1045384,1045987,1046268,1047379,1048605
CVE References: 
Sources used:
openSUSE Leap 42.3 (src):    systemd-228-35.1, systemd-mini-228-35.1
openSUSE Leap 42.2 (src):    systemd-228-25.15.1, systemd-mini-228-25.15.1
Comment 58 Swamp Workflow Management 2017-09-14 19:18:24 UTC
SUSE-SU-2017:2470-1: An update that solves 18 vulnerabilities and has 46 fixes is now available.

Category: security (important)
Bug References: 1004995,1009745,1014471,1017420,1019637,1026825,1027079,1027688,1027908,1028281,1028723,1029523,1031756,1032706,1033236,1035062,1036659,1038132,1038444,1038984,1042392,1043218,1043333,1044095,1044107,1044175,1044840,1045384,1045735,1045987,1046268,1046417,1046659,1046853,1046858,1047008,1047236,1047240,1047310,1047379,1047785,1047964,1047965,1048315,1048483,1048605,1048679,1048715,1049344,1050396,1050484,1051626,1051643,1051644,1052030,1052759,1053409,874665,902364,938657,944903,954661,960820,963041
CVE References: CVE-2013-7459,CVE-2016-9063,CVE-2017-1000100,CVE-2017-1000101,CVE-2017-10684,CVE-2017-10685,CVE-2017-11112,CVE-2017-11113,CVE-2017-3308,CVE-2017-3309,CVE-2017-3453,CVE-2017-3456,CVE-2017-3464,CVE-2017-7435,CVE-2017-7436,CVE-2017-8872,CVE-2017-9233,CVE-2017-9269
Sources used:
SUSE Container as a Service Platform ALL (src):    caasp-container-manifests-0.0.0+git_r155_93e40ab-2.3.3, container-feeder-0.0.0+20170901.git_r55_17ecbd3-2.3.3, sles12-mariadb-docker-image-1.1.0-2.3.10, sles12-pause-docker-image-1.1.0-2.3.11, sles12-pv-recycler-node-docker-image-1.1.0-2.3.10, sles12-salt-api-docker-image-1.1.0-2.3.9, sles12-salt-master-docker-image-1.1.0-4.3.10, sles12-salt-minion-docker-image-1.1.0-2.3.8, sles12-velum-docker-image-1.1.0-4.3.9